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"}, 0x1008) 18:45:30 executing program 3: 18:45:30 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x20000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 18:45:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x11c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) close(0xffffffffffffffff) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x6, 0x7, 0x1, 0xff, 0x7f, 0xff, 0x4d, 0x0, r6}, 0x20) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=unix,', {[{@version_L='version=9p2000.L'}, {@version_u='version=9p2000.u'}, {@nodevmap='nodevmap'}, {@msize={'msize', 0x3d, 0x5}}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@aname={'aname', 0x3d, ')@'}}], [{@audit='audit'}, {@subj_user={'subj_user', 0x3d, '$*'}}, {@euid_lt={'euid<', r4}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_type={'obj_type', 0x3d, '..\'$-['}}]}}) r7 = dup(r2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RSETATTR(r9, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:30 executing program 3: [ 472.490961][T17128] overlayfs: workdir and upperdir must be separate subtrees 18:45:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 18:45:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={r7, 0x0, 0x20}, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x81, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000007f000000010001006540cd96d20490587ea6bf5736bea68dbde0e4ea9b5638828ef825878ff3aeb2f3dcab9e11f29269eec3ec07bfec35042abb29616e3c43965ca8a22f79634754d33a72547a5000300a3b4ff096a2e115ef24fd33dcf2f3acc22fd5ce1d953a35d150dcbf36f00936de6507a6907071ee2429a0e05295a2b1aa356a9478584b102b74fca8a3095c720e252e1666db956c3d2517b06cbe31b8925d0c36c5832f07000000a66fc5fd64cf4aaa70e93e1b4b5583fbbe"]) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none, 0x7}, 0xa) [ 472.554271][T17134] overlayfs: workdir and upperdir must be separate subtrees 18:45:30 executing program 3: 18:45:30 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x20100000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) sendto$inet(r2, &(0x7f0000000280)="2366d3bc79ec69dda442fba447f5714875500e8b7f3b99964c82c55333ec474b1c880f6bbd28aa5404e49c756b6b72864ac3994aeb6fd216e78b154cb71906636c211889f2121d80f1ea02950329491eae08a7b068507fec797392d016f2dbb6b1fd0090cd9985c2b7e22be371373c155a717bcb0d91ee1c09655761b2d6aeb5a2cf57ce43e7020ff6636871067e85e0d32abe2a", 0x94, 0x40, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000200)}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000016c0)=""/10, 0xa}], 0x9) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ocfs2_control\x00', 0x44100, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001840)={0x1, [[0xfff, 0x9, 0x5, 0x1c0000, 0x2, 0x3, 0x5, 0x7], [0x5, 0x9, 0x9379, 0x7, 0x6, 0x1f, 0x180, 0x5ad], [0xe00, 0x3, 0x400, 0x0, 0x7, 0x8001, 0x6, 0x1]], [], [{0x6, 0x80800, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xb70, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x101, 0x1, 0x1}, {0x3, 0x5, 0x0, 0x1, 0x1}, {0x6, 0xffffff9b, 0x1, 0x1}, {0x7, 0x3, 0x1}, {0x7, 0x100, 0x1, 0x1, 0x1}, {0x1035, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x5, 0x1}, {0x9, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x3}, {0x101, 0x0, 0x0, 0x1, 0x1, 0x1}], [], 0x392}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) read$eventfd(r4, &(0x7f0000000240), 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x9193, 0x9, 0x3, 0xff, 0x2}}) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x1933) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 18:45:31 executing program 3: 18:45:31 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x3f000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:31 executing program 3: [ 473.164472][T17161] overlayfs: workdir and upperdir must be separate subtrees 18:45:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 18:45:31 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) eventfd(0x80) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup(r1) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x268001, 0x0) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) ioctl$TCSBRK(r6, 0x5409, 0x9) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @fixed, 0x5}, 0x52) [ 473.224657][T17170] overlayfs: workdir and upperdir must be separate subtrees 18:45:31 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x40000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 473.319325][T17175] QAT: Invalid ioctl 18:45:31 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) [ 473.494508][T17187] overlayfs: workdir and upperdir must be separate subtrees [ 473.543751][T17190] overlayfs: workdir and upperdir must be separate subtrees 18:45:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 18:45:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f0000000080)='\x00', 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0xee, 0x6, 0x2, 0x9, 0xbf980, 0x6ae58d78}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept$netrom(r7, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @remote, @bcast, @rose, @default, @rose, @null, @default]}, &(0x7f00000001c0)=0x48) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0x9b0000, 0x2, 0xe818, r8, 0x0, &(0x7f0000000200)={0x3039f, 0x9, [], @ptr=0x6db}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:32 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x48000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x800, 0x78) getpeername$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:32 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) [ 474.024125][T17200] QAT: Invalid ioctl [ 474.150626][T17208] overlayfs: workdir and upperdir must be separate subtrees 18:45:32 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 18:45:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key(0x0, 0x0, &(0x7f00000000c0)='r', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r4) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.max\x00', 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x880, 0x0) ioctl$FICLONE(r5, 0x40049409, r6) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000100)={0x1, 0x32314247, 0x2, @discrete={0x7, 0xf4bb}}) keyctl$search(0xa, 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) [ 474.213142][T17218] overlayfs: workdir and upperdir must be separate subtrees 18:45:32 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4c000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:32 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x46d5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x45329c11}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x404c081) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 474.532351][T17235] overlayfs: workdir and upperdir must be separate subtrees 18:45:32 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 474.594564][T17244] overlayfs: workdir and upperdir must be separate subtrees 18:45:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 18:45:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfd0a, 0x3fb, 0x10, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000085) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x12, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2a, 0xfe, 0x5, 0x1f, {0x4e22, 0x4e21, [0x8000, 0x81, 0x6, 0x101], [0x80000001, 0x5, 0x8, 0x1], 0x0, [0x1, 0x7]}, 0x3, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "5a171bd0e87277d1134d7ffd42402cb797164e5bebb29c6384e6f5be627b74520b2a7adcfb1967a8327ebb69ebcfe83e4074e0acbe39827c1270f35098436eba525247ccd16d09e9c2f0c0363d15069aae22c17bf24847923966461d37131d851e872ddd051a4b441cd7ea731df16c15248a9cf3516d6cc526e3afa661e869e8dcdaff5e48fb5d4f1261e4c608289e04b9b15830884854bfa263b3601339bd0d5b7e8fd655c229fa1b94cd60ace608f8f4134654794dada836a5883443ce6a165460a2158f804c295457221a6180bbfc2fe91bd373657f1200be3b51de48da709446de"}]}, 0x138}}, 0x4000000) 18:45:33 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x51000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) getrusage(0x1, &(0x7f0000000280)) socket$kcm(0x29, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:33 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 18:45:33 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 18:45:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 18:45:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7fffffff) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) [ 475.130395][T17266] overlayfs: workdir and upperdir must be separate subtrees [ 475.190580][T17276] overlayfs: workdir and upperdir must be separate subtrees 18:45:33 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x5c000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:33 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:45:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x6, 0x888) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) dup3(r1, r4, 0x0) [ 475.465431][T17290] overlayfs: workdir and upperdir must be separate subtrees 18:45:33 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) [ 475.534408][T17301] overlayfs: workdir and upperdir must be separate subtrees 18:45:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20}, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12, 0x2, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:36 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x60000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:36 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/253) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x9}, 0x0) 18:45:36 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:36 executing program 3: r0 = timerfd_create(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 478.200263][T17316] overlayfs: workdir and upperdir must be separate subtrees 18:45:36 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040001}, 0x8000) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = dup(r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) [ 478.260592][T17326] overlayfs: workdir and upperdir must be separate subtrees 18:45:36 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x68000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 478.592863][T17345] overlayfs: workdir and upperdir must be separate subtrees [ 478.620550][T17348] overlayfs: workdir and upperdir must be separate subtrees 18:45:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key(0x0, 0x0, &(0x7f00000000c0)='r', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r4) keyctl$search(0xa, 0x0, 0x0, 0x0, r4) r5 = request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\\%@l\x00', r4) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000100)='syzkaller\x00', 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:37 executing program 3: r0 = timerfd_create(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 18:45:37 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x6c000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000f00)={0x9d0000, 0x2f, 0x7fffffff, r3, 0x0, &(0x7f0000000ec0)={0x980910, 0x6, [], @value64=0x3}}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000f40)={r8, 0x8, 0x10000, 0xecf2}, &(0x7f0000000f80)=0x10) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 18:45:37 executing program 3: r0 = timerfd_create(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) [ 479.249629][T17359] overlayfs: workdir and upperdir must be separate subtrees 18:45:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) [ 479.309034][T17367] overlayfs: workdir and upperdir must be separate subtrees 18:45:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000001080)={0x4, 0x2f, &(0x7f0000001040)="5dd9b250b7927228983c46f84e7ecef8881f64d4", {0x401, 0x4, 0x3132564e, 0x6, 0x2, 0x800, 0x0, 0xc2f0}}) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/4096) 18:45:37 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x74000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:37 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 18:45:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0xff31}]) r4 = dup(0xffffffffffffffff) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000040)=""/164) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) [ 479.533554][T17383] overlayfs: workdir and upperdir must be separate subtrees 18:45:37 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) [ 479.587714][T17389] overlayfs: workdir and upperdir must be separate subtrees 18:45:37 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x7a000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 479.849927][T17404] overlayfs: workdir and upperdir must be separate subtrees [ 479.873025][T17405] overlayfs: workdir and upperdir must be separate subtrees 18:45:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0xff31}]) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000100)={0x7, 'erspan0\x00', {0xfffffffd}, 0x1}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x16e}, 0x0) 18:45:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:38 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0x2, 0x0, [0x80000001, 0x7, 0x20, 0x101, 0xff, 0x6, 0x1, 0x3]}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:38 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x7ffffffe, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) 18:45:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) fcntl$dupfd(r2, 0x406, r3) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={[], 0x40}, 0x5}, 0xa) 18:45:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 18:45:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:38 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x8cffffff, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) 18:45:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:45:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x0) 18:45:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) 18:45:39 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xc0ed0000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:39 executing program 1: r0 = dup(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 18:45:39 executing program 3: r0 = timerfd_create(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) [ 481.338502][T17467] overlayfs: workdir and upperdir must be separate subtrees [ 481.388424][T17471] overlayfs: workdir and upperdir must be separate subtrees 18:45:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = dup(r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xff, 0x7, 0x14, 0x7, 0x0, 0x9, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x2, 0xfe}, 0x0, 0xfff, 0x6, 0x9, 0x6, 0x1, 0x8001}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:39 executing program 3: r0 = timerfd_create(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:40 executing program 2: getdents(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x2600, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 18:45:40 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xe0a00300, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 18:45:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e20, @empty}], 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) 18:45:40 executing program 3: r0 = timerfd_create(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:40 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 18:45:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:40 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) msync(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) 18:45:40 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) [ 482.576569][T17509] device gretap0 entered promiscuous mode [ 482.598843][T17509] device macvtap1 entered promiscuous mode 18:45:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 482.714483][T17509] device gretap0 left promiscuous mode [ 483.200547][T17534] device gretap0 entered promiscuous mode [ 483.211809][T17534] device macvtap1 entered promiscuous mode [ 483.222855][T17534] device gretap0 left promiscuous mode 18:45:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000080000000) 18:45:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:41 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, 'tru3tedGPL.\x14{.em0cgroupem1\xf5\xc4\x82\x95\x9e]\xdfxT=\x11G\xe4\xb3O\xa2\xdf\xd5b'}}, {@uname={'uname', 0x3d, '=fd,\xa8\x00\x00\x00\x00'}}], [], 0x6b}}) 18:45:41 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xf6ffffff, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) [ 483.441478][T17509] syz-executor.2 (17509) used greatest stack depth: 21048 bytes left 18:45:41 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:41 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfeffff7f, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 18:45:42 executing program 2: 18:45:42 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:42 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfeffffff, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x6e01}, 0x0) [ 484.187214][T17580] Failed to access avail idx at 00000000499c42c4 18:45:42 executing program 1: 18:45:42 executing program 2: 18:45:42 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 18:45:42 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xff000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:42 executing program 2: 18:45:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 18:45:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 18:45:42 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:42 executing program 1: 18:45:42 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xff030000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:42 executing program 1: 18:45:42 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x10}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) dup3(r4, r1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) 18:45:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) 18:45:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 18:45:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={[], [], @private}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x1000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xe5, 0x0, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$inet6(0xa, 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fchmod(r2, 0x0) 18:45:43 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xff0f0000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:43 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) 18:45:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 18:45:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) 18:45:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100), 0x0) 18:45:43 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100), 0x0) 18:45:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) r1 = socket$inet(0x2, 0x803, 0x1) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ad90864f09145386419da18d06fc6d4e74ee50"}) 18:45:43 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfffff000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 18:45:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RUNLINKAT(r0, &(0x7f0000001300)={0x7}, 0x7) 18:45:43 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100), 0x0) 18:45:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 18:45:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 18:45:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xffffff7f, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:44 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(r0) 18:45:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = open(&(0x7f0000000140)='./bus\x00', 0x80011c1042, 0x13d) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x8482) 18:45:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) 18:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 18:45:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)) fsync(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200000008a105d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) syz_read_part_table(0x6, 0x0, &(0x7f0000000100)) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xa2) 18:45:44 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, 0x0, 0x0) close(r0) 18:45:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) 18:45:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xffffff8c, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@getae={0x40, 0x1f, 0x1, 0x0, 0x0, {{@in=@loopback}, @in=@broadcast}}, 0x40}}, 0x0) memfd_create(0x0, 0x0) 18:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:45:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 18:45:44 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, 0x0, 0x0) close(r0) 18:45:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfffffff6, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) 18:45:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 18:45:44 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, 0x0, 0x0) close(r0) 18:45:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) 18:45:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfffffffe, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 18:45:45 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) 18:45:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x7) 18:45:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/180, 0xb4}], 0x1, 0x7ffffc) 18:45:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 18:45:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) 18:45:45 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) 18:45:45 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xedc000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:45 executing program 1: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000040)) rt_tgsigqueueinfo(r3, r3, 0x15, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000280)={0x0, 0x10}) 18:45:45 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) close(0xffffffffffffffff) 18:45:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) 18:45:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 18:45:45 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x18000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) 18:45:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000), 0x4) 18:45:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4008d}, 0x0) getpid() ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1e, r1) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/36, 0x24}], 0x4, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) 18:45:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 18:45:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) 18:45:45 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xf0ffffffffffff, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:45 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000100)=0x95e5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1e, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/36, 0x24}], 0x5, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x35, 0x0, 0x1}, 0x8) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:45:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040), 0x4) 18:45:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 18:45:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 18:45:46 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x100000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:46 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)) 18:45:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x6e010000}, 0x0) 18:45:46 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 18:45:46 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x200000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 18:45:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 18:45:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 18:45:46 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x300000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 18:45:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 18:45:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e", 0x24}], 0x1}, 0x0) 18:45:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, 0x0) 18:45:49 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x400000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 18:45:49 executing program 1: r0 = getpgrp(0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x802c542a, &(0x7f00000000c0)=0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) setpgid(r0, r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) 18:45:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:45:49 executing program 3: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0xb) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) 18:45:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000180)) 18:45:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 18:45:49 executing program 2: 18:45:49 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x500000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:49 executing program 2: 18:45:49 executing program 0: 18:45:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 18:45:49 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x600000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:49 executing program 2: 18:45:52 executing program 1: 18:45:52 executing program 0: 18:45:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 18:45:52 executing program 2: 18:45:52 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x700000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:52 executing program 3: 18:45:52 executing program 3: 18:45:52 executing program 2: 18:45:52 executing program 0: 18:45:52 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x800000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 18:45:52 executing program 1: 18:45:52 executing program 3: 18:45:52 executing program 0: 18:45:52 executing program 2: 18:45:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 18:45:52 executing program 1: 18:45:52 executing program 3: 18:45:52 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x900000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:52 executing program 0: 18:45:52 executing program 2: 18:45:52 executing program 1: 18:45:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x2) 18:45:53 executing program 0: 18:45:53 executing program 2: 18:45:53 executing program 3: 18:45:53 executing program 1: 18:45:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x3) 18:45:53 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xa00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:53 executing program 2: 18:45:53 executing program 0: 18:45:53 executing program 3: 18:45:53 executing program 1: 18:45:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x4) 18:45:53 executing program 3: 18:45:53 executing program 0: 18:45:53 executing program 1: 18:45:53 executing program 2: 18:45:53 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xb00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x9) 18:45:53 executing program 3: 18:45:53 executing program 2: 18:45:53 executing program 1: 18:45:53 executing program 0: 18:45:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xa) 18:45:53 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xc00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 18:45:53 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 18:45:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') capset(0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170}, {&(0x7f0000000100)=""/205}], 0x2fa, 0x10400003) lseek(r0, 0x0, 0x1) 18:45:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b060101000000000000fdffffffffff060001000600f2ff9b0007801800018050000240fe8000faff000000000000b0a4ce1c0006000442000000000c00160508000140acdc14aa1400170076657468315f766c616e000000000000050007008800000014001700767863616e3100000000001b020000000900120000007a32000000000c001b403203f968000080000c00148008200140ff00000000f900000004008aab860000f8ff9d970ff7322a3d1cbf3d0900020073797a30"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x467b, 0x0) 18:45:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xe) 18:45:53 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x3c}, {0x6}]}) 18:45:53 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @private}, {0x11, 0x0, 0x0, @dev, "c797d147"}}}}}, 0x0) 18:45:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xd00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf) [ 495.885321][T18060] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:45:54 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000100)) ptrace$setregs(0xf, r0, 0x0, &(0x7f00000000c0)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000140)={0x0}) [ 496.079493][ T29] audit: type=1326 audit(1593024354.192:40): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0x0 18:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x60) 18:45:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1000000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf0) 18:45:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x170b000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 496.734878][ T29] audit: type=1326 audit(1593024354.842:41): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0x0 18:45:54 executing program 1: clock_settime(0x582c0219656e7080, 0x0) 18:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x16e) 18:45:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x180b000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:54 executing program 0: syz_emit_ethernet(0xbae, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffffff00ffffaaaaaaaaaa0086dd60a4f0080b783afffe880000006c00000000000800000001fe8000000000000000000000000000aa86"], 0x0) 18:45:54 executing program 2: socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x1}) 18:45:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x10}}, 0x0) 18:45:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$SO_COOKIE(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x8) 18:45:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f23000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00004c1000/0x1000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 18:45:55 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x2000000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r0, &(0x7f00000012c0)=""/4088, 0xff8) getdents(r0, 0x0, 0x0) 18:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x300) 18:45:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000380)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 18:45:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180), 0x4) 18:45:55 executing program 1: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'veth0_to_hsr\x00'}) 18:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x900) 18:45:55 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x2010000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75706d617458206563727970746673645d7360f704c2ed32663620757365723a6e6c3830b8313117ffc918c960c2002613cccf827734470000"], 0x1e, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000001c0)=""/36, 0x24}], 0x5, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:45:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000380)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) 18:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xa00) 18:45:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r0, &(0x7f00000012c0)=""/4088, 0xff8) 18:45:55 executing program 0: r0 = gettid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2302"], 0x141) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:45:55 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x3f00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xe00) 18:45:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000380)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) 18:45:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 18:45:55 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 18:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf00) 18:45:55 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4000000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75706d617458206563727970746673645d7360f704c2ed32663620757365723a6e6c3830b8313117ffc918c960c2002613cccf827734470000"], 0x1e, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000001c0)=""/36, 0x24}], 0x5, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:45:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0xb) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') setregid(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x6}, [], {0x4, 0x2}, [{}, {0x8, 0x0, r4}, {0x8, 0x4, 0xee00}, {}], {0x10, 0x6}, {0x20, 0x1}}, 0x44, 0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r2, 0x0, 0x20000000000000d8) socket$inet(0x2, 0x0, 0x0) 18:45:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2008210cffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x3f00) 18:45:56 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4800000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75706d617458206563727970746673645d7360f704c2ed32663620757365723a6e6c3830b8313117ffc918c960c2002613cccf827734470000"], 0x1e, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000001c0)=""/36, 0x24}], 0x5, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x6000) 18:45:56 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0x1) lseek(r0, 0x0, 0x3) 18:45:56 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4c00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x6e01) 18:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf000) 18:45:57 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x5100000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) 18:45:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75706d617458206563727970746673645d7360f704c2ed32663620757365723a6e6c3830b8313117ffc918c960c2002613cccf827734470000"], 0x1e, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000001c0)=""/36, 0x24}], 0x5, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x34000) 18:45:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:57 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x5c00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) 18:45:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:57 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x6000000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x400300) 18:45:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:45:57 executing program 2: creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/16}, 0x18, 0x2, 0x1800) 18:45:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) 18:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf0ffff) 18:45:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 18:45:58 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x6800000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000001c0)=""/36, 0x24}], 0x5, &(0x7f0000000780)=""/149, 0x95}, 0x4f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:45:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x1000000) 18:45:58 executing program 1: 18:45:58 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:58 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x6c00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:58 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:58 executing program 1: 18:45:59 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:59 executing program 1: 18:45:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x2000000) 18:45:59 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x7400000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:59 executing program 2: 18:45:59 executing program 3: 18:45:59 executing program 1: 18:45:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x3000000) 18:45:59 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x7a00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:59 executing program 3: 18:45:59 executing program 1: 18:45:59 executing program 2: 18:45:59 executing program 3: 18:45:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x4000000) 18:45:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:59 executing program 1: 18:45:59 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x8cffffff00000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:59 executing program 2: 18:45:59 executing program 3: 18:45:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x9000000) 18:45:59 executing program 3: 18:45:59 executing program 2: 18:45:59 executing program 1: 18:45:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b324c"], 0x40) 18:45:59 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xe0a0030000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:45:59 executing program 3: 18:45:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xa000000) 18:45:59 executing program 1: 18:46:00 executing program 2: 18:46:00 executing program 3: 18:46:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x40) 18:46:00 executing program 2: 18:46:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xe000000) 18:46:00 executing program 1: 18:46:00 executing program 3: 18:46:00 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xf6ffffff00000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x40) 18:46:00 executing program 2: 18:46:00 executing program 1: 18:46:00 executing program 3: 18:46:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf000000) 18:46:00 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfeffff7f00000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x40) 18:46:00 executing program 2: 18:46:00 executing program 1: 18:46:00 executing program 3: 18:46:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x3f000000) 18:46:00 executing program 2: 18:46:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x40) 18:46:00 executing program 1: 18:46:00 executing program 3: 18:46:00 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfeffffff00000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x60000000) 18:46:00 executing program 2: 18:46:00 executing program 1: 18:46:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x40) 18:46:01 executing program 2: 18:46:01 executing program 3: 18:46:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x6e010000) 18:46:01 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xff00000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:01 executing program 1: 18:46:01 executing program 1: 18:46:01 executing program 2: 18:46:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x40) 18:46:01 executing program 3: 18:46:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x9effffff) 18:46:01 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xff03000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:01 executing program 1: 18:46:01 executing program 2: 18:46:01 executing program 3: 18:46:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x40) 18:46:01 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xff0f000000000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:01 executing program 1: 18:46:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf0ffffff) 18:46:01 executing program 2: 18:46:01 executing program 3: 18:46:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x40) 18:46:01 executing program 1: 18:46:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xfcffffff) 18:46:01 executing program 2: 18:46:01 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xffffff7f00000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_gettime(0x0, 0x0) 18:46:01 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[], 0x1e, 0x0) pipe(&(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:46:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x40) 18:46:02 executing program 2: 18:46:02 executing program 3: 18:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xfffff000) 18:46:02 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xffffffff00000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:02 executing program 1: 18:46:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b"], 0x40) 18:46:02 executing program 2: 18:46:02 executing program 3: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, 0x0, 0x0) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="5a6963854ca0fc7f5832d005eb1503fdc0fbf6446c287b7c5a13163d3325d54b5d8a", 0x22}, {&(0x7f0000000280)="73b0988c7bb856942762cf626f881eb70eed5ff8d1976476468b2628bf4233c6922a7f3213fad7f083de88d4c63a1d5f109a29eaa62863fe42eb29dc4f4f57727780958b3bc87e7f5bc07cc7a850d19db4c7e73df184c4986d120df9cb799ac841e6ae97e2554f6853cf42eee293977857c8eee7022bd5db3d53aab53fdffd37e5efa68239fcfebe", 0x88}, {&(0x7f0000000500)}, {0x0}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="4800000000e9150029000000070000007aa815b7748bd612b00837764cbc8b24"], 0x48}, 0x20044846) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x1) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4c1) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14}, 0x14) fchmod(r1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x188) fallocate(r2, 0x0, 0x0, 0x1000100) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0xffff643e, 0x0, 0x1fffffc, 0x0, 0x1b, "004f0003080000ff004b26f2ba45fc1b917201"}) 18:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xffffff7f) 18:46:02 executing program 1: clone(0x0, 0x0, 0x0, 0x0, 0x0) getcwd(&(0x7f0000000140)=""/242, 0xf2) 18:46:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df0200000000e80001dd7300040d000300ea1100000005003700", 0x29}], 0x1) 18:46:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b"], 0x40) 18:46:02 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xfffffffffffff000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xffffff9e) 18:46:02 executing program 3: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, 0x0, 0x0) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="5a6963854ca0fc7f5832d005eb1503fdc0fbf6446c287b7c5a13163d3325d54b5d8a", 0x22}, {&(0x7f0000000280)="73b0988c7bb856942762cf626f881eb70eed5ff8d1976476468b2628bf4233c6922a7f3213fad7f083de88d4c63a1d5f109a29eaa62863fe42eb29dc4f4f57727780958b3bc87e7f5bc07cc7a850d19db4c7e73df184c4986d120df9cb799ac841e6ae97e2554f6853cf42eee293977857c8eee7022bd5db3d53aab53fdffd37e5efa68239fcfebe", 0x88}, {&(0x7f0000000500)}, {0x0}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="4800000000e9150029000000070000007aa815b7748bd612b00837764cbc8b2453d66831"], 0x48}, 0x20044846) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x1) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4c1) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14}, 0x14) fchmod(r1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x188) fallocate(r2, 0x0, 0x0, 0x1000100) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x3) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0xffff643e, 0x0, 0x1fffffc, 0x0, 0x1b, "004f0003080000ff004b26f2ba45fc1b917201"}) 18:46:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b"], 0x40) 18:46:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b32"], 0x40) 18:46:02 executing program 1: epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)) write(r1, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000080)={0x1b8}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:46:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b32"], 0x40) 18:46:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xfffffff0) 18:46:03 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x2c, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:03 executing program 3: syslog(0x3, &(0x7f0000000000)=""/79, 0x4f) 18:46:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000100) lseek(r3, 0x0, 0x3) 18:46:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xfffffffc) 18:46:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b32"], 0x40) 18:46:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) 18:46:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x40030000000000) [ 505.274597][T18583] overlayfs: unrecognized mount option "workdir" or missing value [ 505.312472][T18587] overlayfs: unrecognized mount option "workdir" or missing value 18:46:03 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x51, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:03 executing program 3: getpgid(0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0xbd1, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x80006) [ 505.576695][T18599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 505.610185][T18600] overlayfs: unrecognized mount option "workdirQ./file0" or missing value [ 505.645005][T18603] overlayfs: unrecognized mount option "workdirQ./file0" or missing value 18:46:03 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 18:46:03 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000380)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000000)="fd", 0x1) 18:46:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000080), 0x4) 18:46:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf0ffffffffffff) 18:46:03 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75706d617458206563727970746673645d7360f704c2ed32663620757365723a6e6c3830b8313117ffc918c960c2002613cccf827734"], 0x1e, 0x0) pipe(&(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:46:03 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x5c, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:04 executing program 0: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x0, 0x0) 18:46:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000), 0x4) [ 505.964860][T18626] overlayfs: unrecognized mount option "workdir\./file0" or missing value 18:46:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x100000000000000) [ 506.025522][T18626] overlayfs: unrecognized mount option "workdir\./file0" or missing value 18:46:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000080), 0x4) 18:46:04 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}, 0x39}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f00000037c0)=""/4110, 0x100e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:46:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0xa4) 18:46:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x200000000000000) 18:46:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 506.346903][T18651] overlayfs: missing 'lowerdir' 18:46:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00') r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x0) 18:46:04 executing program 1: sync() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x0) 18:46:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) syncfs(r0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8000]}, 0x8) faccessat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) [ 506.412672][T18661] overlayfs: missing 'lowerdir' 18:46:04 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}, 0x51}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x300000000000000) 18:46:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="170000002100255155f50165ff00fc02e76ed866316b38", 0x17) 18:46:04 executing program 2: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20044846) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x1) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4c1) fchmod(r0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000100) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "004f0003080000ff004b26f2ba45fc1b917201"}) 18:46:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 506.708908][T18677] overlayfs: missing 'lowerdir' 18:46:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x400000000000000) [ 506.747644][T18678] overlayfs: missing 'lowerdir' 18:46:04 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}, 0x5c}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:05 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323000000005a0900461cdbfee9a13be92ee32951d1081b2a739b87d55d849352", 0x4c, 0x0, 0x0, 0x0) 18:46:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x900000000000000) [ 506.994147][T18693] overlayfs: missing 'lowerdir' [ 507.047151][T18699] overlayfs: missing 'lowerdir' 18:46:05 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x2c, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:05 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 18:46:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xa00000000000000) [ 507.382836][T18711] overlayfs: unrecognized mount option "lowerdir" or missing value [ 507.442821][T18716] overlayfs: unrecognized mount option "lowerdir" or missing value 18:46:06 executing program 2: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)}, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:46:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xe00000000000000) 18:46:06 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x51, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:06 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf00000000000000) 18:46:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 508.108506][T18732] overlayfs: unrecognized mount option "lowerdirQ./file0" or missing value [ 508.167707][T18735] overlayfs: unrecognized mount option "lowerdirQ./file0" or missing value 18:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x3f00000000000000) 18:46:06 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x5c, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x6000000000000000) [ 508.496396][T18749] overlayfs: unrecognized mount option "lowerdir\./file0" or missing value [ 508.546278][T18751] overlayfs: unrecognized mount option "lowerdir\./file0" or missing value 18:46:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2c, 0x0, 0xfffffec5}}], 0x40000000000007f, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0xf0ff7f) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:46:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:07 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x39}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:07 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x6e01000000000000) 18:46:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 509.059312][T18770] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 18:46:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x9effffff00000000) [ 509.111288][T18770] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 509.188497][T18778] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 509.255379][T18778] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:46:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:07 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x51}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xf0ffffff00000000) 18:46:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) 18:46:07 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 509.531333][T18791] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 509.558126][T18791] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 509.584580][T18793] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 509.631302][T18793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:46:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xfcffffff00000000) 18:46:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:07 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 509.929933][T18811] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 18:46:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xffffff7f00000000) [ 509.977378][T18811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:46:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 510.083583][T18811] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 510.126409][T18811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:46:08 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:08 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:08 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x2c, './file0/../file0'}}]}) 18:46:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xffffffff00000000) 18:46:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 510.629521][T18839] overlayfs: unrecognized mount option "upperdir" or missing value 18:46:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0xfffffffffffff000) [ 510.670310][T18843] overlayfs: unrecognized mount option "upperdir" or missing value 18:46:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:08 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x51, './file0/../file0'}}]}) 18:46:09 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857efc45e9cc2ae829e150b095e5502626cf1cccaaf692ede000"/38], 0x14}}, 0x0) 18:46:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 510.961097][T18854] overlayfs: unrecognized mount option "upperdirQ./file0/../file0" or missing value [ 511.001948][ T2571] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 511.026674][T18856] overlayfs: unrecognized mount option "upperdirQ./file0/../file0" or missing value [ 511.362118][ T2571] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 511.377096][ T2571] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 511.386598][ T2571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.400873][ T2571] usb 3-1: config 0 descriptor?? [ 511.422576][T18845] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.446089][ T2571] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 511.646205][ T2571] usb 3-1: USB disconnect, device number 5 [ 512.411508][ T12] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 512.781735][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 512.801461][ T12] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 512.810511][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.826810][ T12] usb 3-1: config 0 descriptor?? [ 512.852813][T18845] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 512.873484][ T12] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 18:46:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:11 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:11 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x5c, './file0/../file0'}}]}) 18:46:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x2000000000000802, 0x521240) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000080)={0x1000, 0x4, 0x5}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0xfb5c, 0x2, 0x1, 0x4}, {0x3, 0x6, 0x2, 0x1000}, {0x4, 0xfc, 0xd1, 0x7}]}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000100)={0x1, 0x18, [0xfff, 0x6b, 0x5, 0xad2e, 0xcb81, 0x7]}) 18:46:11 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 513.081873][ T2577] usb 3-1: USB disconnect, device number 6 18:46:11 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0x2) 18:46:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 513.233298][T18900] overlayfs: unrecognized mount option "upperdir\./file0/../file0" or missing value [ 513.309735][T18906] overlayfs: unrecognized mount option "upperdir\./file0/../file0" or missing value 18:46:11 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}, 0x39}]}) 18:46:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:11 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dd373ca6831122ee2445154f66e653180c01fca37bf08ace846cb8909c9f9775fb374516100bcf36d9be96b6c084f5bea1e5429f1224ed9ccf6d22ba02008b061cb88a1779af3c1e5c66dc0a3741c328f8137839fd3d113b0000000000e7e800"], 0x14}}, 0x0) 18:46:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 513.615344][T18923] overlayfs: failed to resolve './file0/../file09': -2 [ 513.651562][ T2577] usb 3-1: new low-speed USB device number 7 using dummy_hcd 18:46:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x0) [ 513.732844][T18931] overlayfs: failed to resolve './file0/../file09': -2 [ 514.021463][ T2577] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 514.040822][ T2577] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 514.053571][ T2577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.083532][ T2577] usb 3-1: config 0 descriptor?? [ 514.102169][T18904] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 514.122625][ T2577] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 514.340629][ T3998] usb 3-1: USB disconnect, device number 7 18:46:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e7a36fbb90600000000000000000f00"/34], 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ca}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x48, r8, 0x200, 0x70bd26, 0x3, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x16, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048894) 18:46:12 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:12 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:13 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}, 0x51}]}) 18:46:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 514.989104][T18959] overlayfs: failed to resolve './file0/../file0Q': -2 [ 515.010839][T18964] overlayfs: failed to resolve './file0/../file0Q': -2 18:46:13 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}, 0x5c}]}) 18:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RSTATFS(r5, &(0x7f0000000040)={0x43, 0x9, 0x1, {0xe18, 0xa8, 0x80000001, 0x8, 0x8, 0x7ff, 0xfffffffffffffffb, 0xb1, 0x1}}, 0x43) 18:46:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 515.261232][ T3998] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 515.318918][T18972] overlayfs: workdir and upperdir must be separate subtrees 18:46:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8502000000203dea99ae0f00eaff"], 0x14}}, 0x0) 18:46:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:13 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) [ 515.377208][T18976] overlayfs: workdir and upperdir must be separate subtrees 18:46:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 515.641669][ T3998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 515.672440][ T3998] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 515.711196][ T3998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.771633][ T3998] usb 3-1: config 0 descriptor?? [ 515.812192][T18960] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 515.832511][ T3998] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 516.059810][ T17] usb 3-1: USB disconnect, device number 8 18:46:14 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:14 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0xff31}]) dup2(r1, r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="857e0500062fa70000000f000000dd798377d8dc102cc436a0d5ac270478245edd56a26e364c3354723a904a1ab7988eb88a1c0aae2372c5924d94af8adf3875e1b27af6d02f83519e03aa1d7ced5d665ad6eedbe3eb65"], 0x14}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000080)={0x4, 0x1, 0x4, r4, 0x0, &(0x7f0000000040)={0x30023, 0x401, [], @value=0x7fff}}) r7 = gettid() r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}], 0x20}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={[], 0x1, 0x10000, 0x8, 0x3, 0x1, r7}) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, &(0x7f0000000100)) 18:46:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:14 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:14 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 516.717789][T19012] overlayfs: workdir and upperdir must be separate subtrees 18:46:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r1, 0x64223e343cb77e85, 0x0, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15acc7d6}]}, 0x34}}, 0x0) 18:46:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 516.790179][T19016] overlayfs: workdir and upperdir must be separate subtrees 18:46:15 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x2}) 18:46:15 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 516.961110][ T4003] usb 3-1: new low-speed USB device number 9 using dummy_hcd 18:46:15 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 517.195334][T19031] overlayfs: unrecognized mount option "" or missing value [ 517.243824][T19035] overlayfs: unrecognized mount option "" or missing value [ 517.331309][ T4003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 517.356879][ T4003] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 517.384661][ T4003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.423748][ T4003] usb 3-1: config 0 descriptor?? [ 517.441783][T19014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 517.462132][ T4003] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 517.691214][ T2571] usb 3-1: USB disconnect, device number 9 18:46:16 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xdc, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa8d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x500}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x29}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000040)={0xbd, 0x3, 0x6, 0x800, 0x2, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\b\x00'/14], 0x14}}, 0x0) 18:46:16 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:16 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:16 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x3}) 18:46:16 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000012c0)=ANY=[@ANYBLOB="4a2e7b86e56d39a0522a1f2b53174696b1bb87b79d001745ed262349a0e24cf33adb7866aa8e51e1a4681753e97a74df6d153a798f63f70c07780d82f24973187f98a06a6e61a61c4bce5906595f"], 0x2, 0x1) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={r6, 0x1000, "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"}, &(0x7f0000000100)=0x1008) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r7, 0x9}, &(0x7f0000000180)=0x8) [ 518.371950][T19059] overlayfs: unrecognized mount option "" or missing value [ 518.394509][T19063] overlayfs: unrecognized mount option "" or missing value 18:46:16 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x4}) 18:46:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4810) [ 518.630932][ T3998] usb 3-1: new high-speed USB device number 10 using dummy_hcd 18:46:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 518.675217][T19074] overlayfs: unrecognized mount option "" or missing value [ 518.699653][T19076] overlayfs: unrecognized mount option "" or missing value [ 518.890897][ T3998] usb 3-1: Using ep0 maxpacket: 8 [ 519.010870][ T3998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 519.023931][ T3998] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 519.035350][ T3998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.051491][ T3998] usb 3-1: config 0 descriptor?? [ 519.098478][ T3998] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 519.294904][ T17] usb 3-1: USB disconnect, device number 10 18:46:17 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:17 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x5}) 18:46:17 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@l2tp={0x2, 0x0, @multicast1, 0x1f5}, {&(0x7f0000000100)=""/132, 0x84}, &(0x7f0000000040), 0x9}, 0xa0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:17 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 519.893352][T19100] overlayfs: unrecognized mount option "" or missing value 18:46:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 519.948474][T19107] overlayfs: unrecognized mount option "" or missing value 18:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) geteuid() r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$llc(r6, &(0x7f00000000c0)={0x1a, 0x322, 0x5, 0x1, 0x86, 0x8, @multicast}, 0x10) close(r5) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r5, 0x0, 0xff31}]) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0xfc30, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400006f603a5eec3097ddb6a5740feb1555eccd44c76ca1cac6b79fbdeda00960dce61b22a279ceca3f01d682f4218ff839e77879d2134db78570ad8dd664fe97094c346d1b25d76905b7", @ANYRESDEC=r7, @ANYBLOB="857e00000000000000000f000000a5df01ff018a767c012197c7de78786974e794ee197a3a59f9523432a21833b7a7a0bedc16ee8022430498af70d528b5c40bbe07"], 0x14}}, 0x200408c4) 18:46:18 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x6}) 18:46:18 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1d1815e094db3c97, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24}, 0x8004) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 520.300613][T18986] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 520.335844][T19119] overlayfs: unrecognized mount option "" or missing value [ 520.385597][T19125] overlayfs: unrecognized mount option "" or missing value [ 520.550684][T18986] usb 3-1: Using ep0 maxpacket: 8 [ 520.700937][T18986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 520.716451][T18986] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 520.728026][T18986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.738055][T18986] usb 3-1: config 0 descriptor?? [ 520.801770][T18986] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 521.003433][ T2571] usb 3-1: USB disconnect, device number 11 18:46:19 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:19 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x8, 0x7, 0x2, "25cb153521ec36b97c8accd902c08b0ef53c914ac2e4b6e7c888e964ee9b0260", 0x49433553}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNDEL(r6, 0x400443c9, &(0x7f0000000040)={@any, 0x1}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:19 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x7}) 18:46:19 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 521.614519][T19149] overlayfs: unrecognized mount option "" or missing value 18:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2c, 0x0, {0xf}}, 0x14}}, 0x0) [ 521.658727][T19154] overlayfs: unrecognized mount option "" or missing value 18:46:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:19 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x8}) 18:46:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:20 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) [ 521.930610][ T2577] usb 3-1: new high-speed USB device number 12 using dummy_hcd 18:46:20 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 522.019862][T19166] overlayfs: unrecognized mount option "" or missing value [ 522.057655][T19170] overlayfs: unrecognized mount option "" or missing value [ 522.190339][ T2577] usb 3-1: Using ep0 maxpacket: 8 [ 522.310960][ T2577] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 522.336078][ T2577] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 522.346841][ T2577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.357766][ T2577] usb 3-1: config 0 descriptor?? [ 522.401527][ T2577] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 522.607929][ T4003] usb 3-1: USB disconnect, device number 12 18:46:21 executing program 2: syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 18:46:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000128bd7000000000000f000000cec56a338313f1ed21ed2f30cd2b441d67e4412c5e8956411fa61c621900218a87dcbd40707213175d5e91e36d37e11835ae133a547e4d5086c2b7546263f09624f8c978961a06856d9a3dc15e66d8c58f4b9ba521a1a93c3664da218fdab5dc00116b84b9df9ca2c008efccb08fc9dd1d882894bff27d1a53dceae9b30171fd86c7461680ff47e92b37ab821ffff63cbecf98c816098329574bc4b59ce1f376000094959b2b07bc302d"], 0x14}}, 0x4820) 18:46:21 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x9}) 18:46:21 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 523.257808][T19194] overlayfs: unrecognized mount option " " or missing value 18:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 523.332575][T19203] overlayfs: unrecognized mount option " " or missing value 18:46:21 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0xa}) 18:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:21 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfbd) sendto$packet(r7, &(0x7f0000000280)="a12e8d29dfb829e1f3e237a205498710f7dd66ad98f2b20472ff0a161465d635a3ed0293f8ac224a53b45a784b41b38f64eba627c0f8118b411007924f7932b41509778ed8fc152212e2d4bbb068355eaa8c5d475027c1bf580faf4e2c0e3cdda013898b71a89c4d9ff073784982f00c07", 0x71, 0x10, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800e1ff44f6a2c7c761"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0xc) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r9}, 0xc) write$binfmt_script(r10, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, 'IPVS\x00'}], 0xa, "aa2716f8199480985ffe152d773d3715e9ba640321be3dc4ee0abbd8d96e13fda5588c89a4ab2b56db783c8d2522996b1c955db4020c98653024ccec94011b10003c7d774b46ffa0cec20d838892c8dd017fdb88e20b4267c5beeb87aa67d758cebd0e94b9363e8c138a1515bbf2fefa"}, 0x81) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000d00)=""/138, 0x8a}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000c80)=""/110, 0x6e}, {&(0x7f00000006c0)=""/151, 0x97}, {&(0x7f0000000780)=""/237, 0xed}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000880)=""/3, 0x3}, {&(0x7f00000008c0)=""/207, 0xcf}], 0xa, &(0x7f0000000a80)=""/215, 0xd7}, 0x120) [ 523.628364][T19211] overlayfs: unrecognized mount option " [ 523.628364][T19211] " or missing value [ 523.685132][T19218] overlayfs: unrecognized mount option " [ 523.685132][T19218] " or missing value 18:46:21 executing program 2: syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 18:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:21 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0xb}) 18:46:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 524.081303][T19234] overlayfs: unrecognized mount option " " or missing value 18:46:22 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) [ 524.128024][T19239] overlayfs: unrecognized mount option " " or missing value 18:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$netlink(0x10, 0x3, 0x15) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="ffff000800000000c5eb1661a2af0ae4ba7c000000000000269f0d9242cef912787b2412a6c98e669a2b80ebb0f20a1c850ad43f5f224f43760be4e1c634bfdd63b55640e990939383eb4fadb042bb12c4bb3cec9096e3229ef0f9004bbfe3e74531414fc825612e79c835c63b2ec6d11f96b85f409b7c6b9d442d01e7988cbb0598025b4340470765fbbeed6af7644d9fd74acb317247aa6c54eaced5c0"], 0xf8}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac93cb86e137cc9c1eae18fb4887f2e47f44f90e5ed138d10896410ff661756dee12fed36b6a31316b37c79c7098a28dd5a9ae29a2171c103ab7d22da595ef112524d889d5067962e6338f80ca579a132b8931b9167d155e838d", @ANYRES16=r3, @ANYBLOB="00002dbd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:22 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0xc}) 18:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f19c084d458a72f16da6cae92b9464babf07c72071c531091ecd8e6da6c81268d81a9f97284415ccb386b0e57bcb33628b1768611d41e1c76e63d3aff68cc5951304ac7be669c6395921cfb42a253f11def03b00a4b93db4b3c0c9c78a11e35c81ac6cc8837982db16f4b31017684273b24e09ebb4d7e753bff24554a2029f23d08a3d56d11380bab18387c525dfb87146226397d98ffaced17f94b74613be9b0f83", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) 18:46:22 executing program 2: syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) [ 524.490749][T19251] overlayfs: unrecognized mount option " " or missing value [ 524.520837][T19253] overlayfs: unrecognized mount option " " or missing value 18:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:22 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0xd}) 18:46:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f08", @ANYRES16=r4, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) 18:46:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000007c1ddda4161f3000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x2, 0x40, 0xff, 0x9, 0x0, 0x9e4, 0x490, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xaa7, 0xff}, 0x4d478, 0x75, 0x9, 0x0, 0x5, 0x6, 0x5}, r8, 0xb, r10, 0x7) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', r7}) [ 524.815276][T19270] overlayfs: unrecognized mount option " " or missing value [ 524.888798][T19277] overlayfs: unrecognized mount option " " or missing value 18:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:23 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x10}) [ 525.014775][T19279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 525.077386][T19279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:23 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') prctl$PR_GET_TIMERSLACK(0x1e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) syz_open_pts(r4, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000040)={0xfe, 0x0, 0x800, 0x0, 0x2}) 18:46:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 525.165569][T19290] overlayfs: unrecognized mount option "" or missing value 18:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 525.225442][T19297] overlayfs: unrecognized mount option "" or missing value 18:46:23 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x48}) 18:46:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sync_file_range(r1, 0x200, 0x8, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 525.508647][T19313] overlayfs: unrecognized mount option "H" or missing value [ 525.590055][ T17] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 525.594273][T19317] overlayfs: unrecognized mount option "H" or missing value 18:46:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RRENAMEAT(r5, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="e98ad86cfa2a8c61bc125cd929857e0000000080000000"], 0x14}}, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x40081, 0x0) ioctl$SIOCRSACCEPT(r6, 0x89e3) 18:46:23 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x4c}) [ 525.859929][ T17] usb 3-1: device descriptor read/64, error 18 [ 525.915379][T19328] overlayfs: unrecognized mount option "L" or missing value [ 525.964185][T19332] overlayfs: unrecognized mount option "L" or missing value [ 526.279883][ T17] usb 3-1: device descriptor read/64, error 18 [ 526.549871][ T17] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 526.819824][ T17] usb 3-1: device descriptor read/64, error 18 [ 527.209766][ T17] usb 3-1: device descriptor read/64, error 18 [ 527.330775][ T17] usb usb3-port1: attempt power cycle [ 528.039696][ T17] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 528.129905][ T17] usb 3-1: Invalid ep0 maxpacket: 0 18:46:26 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64=r3, @ANYBLOB="857e00000000005100000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 18:46:26 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:26 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x51}) [ 528.279721][ T17] usb 3-1: new low-speed USB device number 16 using dummy_hcd 18:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 528.440998][T19347] overlayfs: unrecognized mount option "Q" or missing value 18:46:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xfb4, r1, 0xe88, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc1, 0x25}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x80}}, @NL80211_ATTR_IE={0x8a8, 0x2a, "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"}, @NL80211_ATTR_IE={0x6b3, 0x2a, "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"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xc00000}]}, 0xfb4}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r5) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r5, 0x0, 0xff31}]) r7 = socket$inet6(0xa, 0x4000000080002, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 528.491490][T19351] overlayfs: unrecognized mount option "Q" or missing value 18:46:26 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x5c}) 18:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:26 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x60}) [ 528.704958][T19362] overlayfs: unrecognized mount option "\" or missing value [ 528.728288][T19364] overlayfs: unrecognized mount option "\" or missing value 18:46:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 528.789897][ T17] usb 3-1: device not accepting address 16, error -71 [ 528.804055][ T17] usb usb3-port1: unable to enumerate USB device [ 528.929482][T19370] overlayfs: unrecognized mount option "`" or missing value [ 528.949664][T19371] overlayfs: unrecognized mount option "`" or missing value [ 529.239598][ T17] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 529.509487][ T17] usb 3-1: device descriptor read/64, error 18 [ 529.899474][ T17] usb 3-1: device descriptor read/64, error 18 [ 530.169490][ T17] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 530.449389][ T17] usb 3-1: device descriptor read/64, error 18 [ 530.839353][ T17] usb 3-1: device descriptor read/64, error 18 [ 530.960085][ T17] usb usb3-port1: attempt power cycle 18:46:29 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x87, 0x6}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) sendmsg$tipc(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="f1e6c38c86c41b750a4b2ba4ac24738aaa92b9beef592dcff716f3e830f835a12c41258e96ef5954d3e0334d08f6eda9306609c7e4ca6ef9f79ddc653ea63e498b7d3a0515c61741d6a6da13350f4d01d19fe1a5ca44de2d15e91be053a3015fda294cf0ace3a5736528ca7448e5291c2d4a6df613ed9c336ea23e70859d745e45ce04970a1f6af7acf554004842e2d2c5946a7d7de5d0475026c3fc8f74ee78c302b3ac13a1d44ce99fd97cef545edb26f36aa4cd6a2fe057f5ffd2d12abb2dfeaf4ca5b1da102570", 0xc9}, {&(0x7f0000000280)="7c1e56f320d033a571bc8f6151730a7a769d09a6e9ef843d81d037eecce015f89816d54db1611f3e364a1e757ab968451c15d8c110124e7a03eb70fd946d86c6011ba0e493b381fb1fbb308dfad5e94056aa1fdbc41b4f071662b8b09f4e7a031471f39bbfe3561eef01e8c97716b9738036e0291215d568a509f8a01c340e3c72c6784adb6ad1e7499de48f4a405c5a998ae3b7a43c8c60070150bcecb6ecee520ef305f809cd667ef4186c3ea98c5eac4bc3d0ea", 0xb5}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="1d976356d849eb4d71f695559af4f336f4125fc49cedfdf0cee18a49ae4db38a740e9247e08e2feae620c37f44096cec181840b4deed860fea3a1f245897b76c62a539c8695f49", 0x47}], 0x4, 0x0, 0x0, 0x4040}, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd27, 0x0, {0xf}}, 0xffffffffffffff3c}}, 0x48080) 18:46:29 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:29 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x68}) 18:46:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa0000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0xff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}], 0x20, 0x20004000}, 0x40) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r4}) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 531.520660][T19385] overlayfs: unrecognized mount option "h" or missing value [ 531.601828][T19393] overlayfs: unrecognized mount option "h" or missing value 18:46:29 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x6c}) 18:46:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1445fcff", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f0000000100)=""/182, &(0x7f0000000040)=0xb6) 18:46:29 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 531.889189][ T17] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 531.930630][T19405] overlayfs: unrecognized mount option "l" or missing value [ 531.973856][T19411] overlayfs: unrecognized mount option "l" or missing value [ 531.989355][ T17] usb 3-1: Invalid ep0 maxpacket: 0 [ 532.139210][ T17] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 532.239410][ T17] usb 3-1: Invalid ep0 maxpacket: 0 [ 532.245063][ T17] usb usb3-port1: unable to enumerate USB device 18:46:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x80, 0x0, 0xf9, 0x40, 0x0, 0x2, 0x2db, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2b, 0x2, @perf_config_ext={0x9, 0x4}, 0x1000, 0x100, 0x90, 0x5, 0x7, 0xd5f, 0x8}, r4, 0xb, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x20fff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400ce0096c70f5b4e1d99f4381e198ff8c9916ea6a645a9408e6a68ec2da6d117bd4a9b51dd037cb36bf68d2bab588adf994e27d26d754a2a7ad9e49df1dc757775171951f23b71047924b843a1c5c9773c57ec9281f7ae175e3b9f7229d77058e23fa787849ae62d77da8be9d35847694e8705d9896c14e665c34b466bd2566ed00000d3fd08b5cc176819ef00c94f2864a1937503e7f67518d2a644bdc346", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18:46:32 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:32 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x74}) 18:46:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:32 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 18:46:32 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 534.612117][T19423] overlayfs: unrecognized mount option "t" or missing value 18:46:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00b90000", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) [ 534.665162][T19431] overlayfs: unrecognized mount option "t" or missing value 18:46:32 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}], [], 0x7a}) 18:46:32 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)={0x88, 0x2d, [], [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x80, 0x96, "1c9428cf95162430c2cee69b63eca725f2194a7a1fb7fac7a48246431e4251f0421ba27cd8a488ec93f92e2fdc5eafc2b28eca30a77c2addac5fadb51c47d18e4a8f5b599fc1a652ec21650dfe1cc2b6f23b57f1af41ba39a165ce82500d657701e6eb98b3e553412180e3f477f2891135cfe7bef2c2057c1370d06f2844ed102f5e36c07d62407ba22c33b14214674c5b1e4a70f811"}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x0, [0x7, 0x1, 0xb95b, 0x100000000]}}, @generic={0x9, 0x98, "6bba07057a7e17f8108ff568bf6f568fdc58c77eba5ce3c51e4775cb24e582758aaca5d7e1f9036feecbb15e5a067d3123be8380504ac59920f492d42f4cf89106cad31a37fbc94db390c5a9d09b4bd6e3893b59766bb14cfed7e9649a96874514c26a1a71c5edb84e01c3d26727820e5896b236efcdf053ded8d0075a54d3354260916ebf35b8a4a8f5ce8d8c0afc43ae90bf9ff85694c5"}]}, 0x178) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x2}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 534.928892][ T4003] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 534.978345][T19445] overlayfs: unrecognized mount option "z" or missing value [ 535.023912][T19451] overlayfs: unrecognized mount option "z" or missing value [ 535.338929][ T4003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 535.351952][ T4003] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 535.361246][ T4003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.372924][ T4003] usb 3-1: config 0 descriptor?? [ 535.425008][ T4003] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 535.625739][ T4003] usb 3-1: USB disconnect, device number 21 18:46:34 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x20000400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00"/14], 0x14}}, 0x0) 18:46:34 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 18:46:34 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c1e2ad6e7cd7865302c75707065726469723d2e2f66696c65302fb72a2f66"]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) 18:46:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x2) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd28, 0x25dfdbff, 0x40, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000007c1ddda4161f3000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r9}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x7}, 0x43, r9}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 536.305397][T19478] overlayfs: failed to resolve './file0/·*/f': -2 [ 536.351085][T19481] overlayfs: failed to resolve './file0/·*/f': -2 18:46:34 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x6c, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}]}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c556f7765726469723d2e2f66696c65302c757070e84e1e82cf67ecc4a97ae2d2d8db66e5726469723d2e2f66"]) 18:46:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 536.465439][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:46:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 536.588789][ T4003] usb 3-1: new low-speed USB device number 22 using dummy_hcd 18:46:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d1e, &(0x7f0000000000)=0x5e) r5 = dup(r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000100)="37281730e725d93acee48a2177662b64e8230f4441204643e661c6a6717d00f1e7dc0020a31072af37454670365df0555f388f1ffca414b7bec5d6c3f2a04326dc22543ad054bb9d6be501791431ba9367d7cd451cdd897943f997655bf79a8adbe8e4322b643acefb62dc40ce525b68bc41546adfb93fc8a15b63fc7130b734e1f50ae9a4202dea884eb3e1be94566700f6e407cfbdfbb5c936f1d23872c0938666168c932fa29b3a0064dce90374810c27727b4797a7b7ace783c5778345172157dee9fce31f13de8e53e2b06a9edf43b8ff8ace2cccefcd437d091574f03d28623f05696b0dabeec5d9db3e5f5bb2", 0xf0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000400"], 0x14}}, 0x0) 18:46:34 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 536.683230][T19498] overlayfs: unrecognized mount option "Uowerdir=./file0" or missing value 18:46:34 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0x9, 0x2, 0x4}, 0x3, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0x9d0f, 0x6, 0x9, 0xdb2d}) r2 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 536.999196][ T4003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 537.037407][ T4003] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 18:46:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7a89ec860926f487f2e9a2eae78c154f28ae30ee8512538f54829daf514b4334c7a9779c06fe165cef5e2e582344136fffd37d7ac5b77b8fe5dc1fae4b81b9a980a3cd34aafd208c819f556ce196b2d8a523690c0720ddabad775c88f476055baa5c7d641b3c59628edaccd41695b1be5ac9c329d4dded7a62461b28d84afb844f7f49175c53697c23a58cd24257c71517d8f30cb8d54822e377c645adce6d46060d0dd93175aed9", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f0000009148c300000000000000005f84150ed230cfd5eb4a37ecea051d6ef57656391f4b744a9cb70fdef8a088e9144496d1fa79d5f44b29d91899adf5dde753d505f6b002621ce50cbc85dc6734104539b74d97dbff065a1229a1ab3c3ba666600800afbf3e38bb7013195c5492c9e937bf97524061cab27d59abf4acbb45f3f5fd7edb280eb52e607e0156a241f24a36e01339650ff8267218a68e8bbe25903568d4d8d089310d559067b64268dbf1852c886891050273d571c77a5b9d"], 0x14}}, 0x0) [ 537.064287][T19511] overlayfs: workdir and upperdir must be separate subtrees [ 537.086588][ T4003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.140772][ T4003] usb 3-1: config 0 descriptor?? [ 537.191288][ T4003] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 537.393083][ T17] usb 3-1: USB disconnect, device number 22 18:46:36 executing program 2: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 18:46:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:36 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./file0,lowerdir=./file0,upperdi2=./file0/../file0,\x00']) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000000c0)={0x3, 0x1, @raw_data=[0xffffffff, 0xfffffff7, 0xfffffffa, 0x6, 0x200040, 0x5, 0x11, 0x5, 0x9, 0x77, 0x8, 0x7fff, 0xffff6aa6, 0x3, 0x5, 0xc8]}) 18:46:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:36 executing program 5: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) accept4(r6, &(0x7f0000000140)=@rc={0x1f, @fixed}, &(0x7f00000001c0)=0x80, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000000c0)={0x900000000000000, 0x0, 0x400, 0x1, 0x1b}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000300)={r9, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00a78f800092033f0073edc9ec8d1a1b83e783970db43718b7a3382b0e438fa98998c25d6707336badb0a2be2718c3902cc820145440780331d09f811da5b9f024f9ff14679c5e1b0d99e58fadcc05cf12247f60a5d1ca4cb8c5358e425e5e9c380127f9609403088e4ec894d78c4842f4daf4a73b1d658b206c68d6bf4c9f11ca", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) 18:46:36 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 538.014389][T19535] overlayfs: unrecognized mount option "upperdi2=./file0/../file0" or missing value 18:46:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:36 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x400100, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0xfffffffc}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5b480bdacacab0fe01f9058e36689c3b50f487107ec51f32e8124b2f1ea649b8f728d646846111bd4c2f0d7542312523cea20646b362629fbfa90dfefe8f2c4ce0bc033d3147e581cf387cbed2e930bb9206a2d62ecc71a6917f9abf61d5dd8bacfd7f2ba45c54d4b1f321b5a718d5e0ffa509759cabf6a9589bc4191d24071595c91b1ec305c47141bf0adb81a3ac0ef325deba295c5519c1f6e1e1d3b677bbee2a76526d9f9e35783bb1bb2350dd90cab992de574c99111b51319a68284bf41ffdc6cffa1302e02ab31614cfa71cb0b97de43f384a04d42c1c"]) socket$inet_smc(0x2b, 0x1, 0x0) 18:46:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:36 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 538.308856][ T4003] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 538.399609][T19558] overlayfs: unrecognized mount option "[H ÚÊÊ°þùŽ6hœ;Pô‡~Å2èK/¦I¸÷(ÖF„a½L/ uB1%#΢F³bbŸ¿© þþ" or missing value [ 538.668789][ T4003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 538.682061][ T4003] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 538.691463][ T4003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.701171][ T4003] usb 3-1: config 0 descriptor?? [ 538.739534][ T4003] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 538.941723][ T4003] usb 3-1: USB disconnect, device number 23 18:46:37 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x64223e343cb77e85, 0x70bd2a, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:37 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:37 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x48020080) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d29dd6503a9c7ac8935b9a30215a6aea7e9b60ae25ad35be5dfed68b97b1708461d6a72d89eec21025ffce92eb30103eb0da1432cc1ed796848cdf24c4376a21a48dcd8f3b1096280c9dd63b8e0078c934735cc82065ae24f65beee3070f052feec9314ecb3f08e1d7913178dd57b34e60da23cca2563df409a07a3e135f996aaaeca1ba724222e85944f4996d4ff09f23ac2e25b955eaa37ad052"]) 18:46:37 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x89}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) 18:46:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00000000000000080f000000"], 0x14}}, 0x0) 18:46:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 539.606177][T19585] IPVS: ftp: loaded support on port[0] = 21 [ 539.653524][T19590] overlayfs: unrecognized mount option "ÒÖP:œzÈ“[š0!Zjê~›`®%­5¾]þÖ‹—±p„aÖ§-‰îÂ%ÿÎ’ë0>°Ú2Ì×–„Œß$Ä7j!¤Í;–( Ö;Ž" or missing value [ 539.711216][T19597] misc userio: No port type given on /dev/userio 18:46:37 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x89}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) 18:46:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) close(r4) socket$netlink(0x10, 0x3, 0xe) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) [ 539.952837][T19626] IPVS: ftp: loaded support on port[0] = 21 [ 539.982456][ T168] tipc: TX() has been purged, node left! 18:46:38 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 540.004691][T19627] misc userio: No port type given on /dev/userio 18:46:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:38 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x89}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) 18:46:38 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x89}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) 18:46:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = accept4$bt_l2cap(r3, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 18:46:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:40 executing program 2: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 18:46:40 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x103102, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x7, 0x2, 0x81}) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f00696c65302c75707065726469723d2e0400000065302f2e2e2f66696c61302c00d0b96dc164def92fa5a82f846ef4848ae714eb80a0474afe227f70f8d52e1c8df202b889b54bbf0deb0dd2b068570493e8f08d18f5f80ec1ce56dc6da918da219279b7f6973aa6121b49127ab543816b6ae3f16c71b4a415c5aa1e972b850ac7c6463f78d2231df36c37071a773e55003e6c1727fdd8be2d3e53f5a15dfd38d66dc910a4bcde37c93f96e838bc87844f2e61334305e3"]) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, @in={0x2, 0x4e20, @remote}], 0x2c) 18:46:40 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:40 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x64223e343cb77e85, 0x4, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) [ 542.790691][T19690] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 542.843248][T19690] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 542.892598][T19696] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 542.944669][T19696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:46:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="0900000093a8bb9988bbba127d719b7c03ff96d679caab9336d3cc5aa4cd7bfecd2cd8a5facc07e1942d9f77654b96aa7269430e0a83054d27000000e80000000000", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) 18:46:41 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000002e2f66696c65302c6c6f7765726469723d66696c65302c2a707065726469723d2e2f66696c65302f2e2e2f66746c65302c0000002b9b93cec0f8d478b686a59605d2816ec3e211880430c80ec17ba2ea04622c1f5b116140ea7b5d67b0f679739f08a7380212b6fbe924aaabc40537a1cf170d67593ed0e5140612466f32a38eb60ef62d9e9cd24784bb32f7279daee38d11772cc24b"]) 18:46:41 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840024e2300000000030038c88cc055c5ac27a6c5b068d0bf46d323000000005a0900461cdbfee9a13be92ee32951d1081b2a739b87d55d849352", 0x4c, 0x0, 0x0, 0x0) 18:46:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:41 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}], 0x20}, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000080)='status\x00') ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000100)={0x8, 0xffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x191002) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r6, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:41 executing program 2: unshare(0x2a000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)) [ 543.266600][T19713] overlayfs: unrecognized mount option "" or missing value [ 543.318177][T19718] overlayfs: unrecognized mount option "" or missing value 18:46:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:41 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x80002, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000002c0)=""/143, &(0x7f0000000200)=0x8f) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x32, "69b6c0a6bcccb48ed87c33cbb3d8ee7af108baef8ab7296b0a40ff426a804a9d9371c003eabf6a6eeac41b7f274050585f4a"}, &(0x7f0000000000)=0x56) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f668b6c65302c00"]) 18:46:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0x2}, &(0x7f00000000c0)=0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000007c1ddda4161f3000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={@local, @remote, @dev={0xfe, 0x80, [], 0x43}, 0x8, 0x2, 0x2, 0x100, 0x1, 0x400000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x800, 0x8, 0x5, 0x6, r8}, 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x100000001) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000008791950a76d2b817aefbf643cb37ce1f87ace874ca0e916e67cbf5feafa46e5a3ef620cd76db8342e66c862fe6a2a9a3d7505d318eca7aebb097883aa9ff6664bf0000000000000000", @ANYRES16=r3, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) 18:46:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) 18:46:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 543.650365][T19733] overlayfs: failed to resolve './file0/../f‹le0': -2 [ 543.709956][T19737] overlayfs: failed to resolve './file0/../f‹le0': -2 18:46:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:41 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:41 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:41 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='lowerdir', &(0x7f00000000c0)='.\x00', r6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f72026469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c7570706572646972582e2f66696c65302f2e2e2f66696c65302c00"]) 18:46:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:42 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001040)={r1, 0x3f, "750913e1513fdd4cea336032316b2433b9d656fc09a34ead0bb4ff2ca5cb052497ce47b11845fabec887ff8ce5efbd5b45e87625a41242dc05a05829b5e3c8"}, &(0x7f00000010c0)=0x47) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000fc0)=@broute={'broute\x00', 0x20, 0x3, 0xce2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0x1, 0x1, [{0x11, 0x2, 0x88e7, 'vxcan1\x00', 'ipvlan1\x00', 'ip6erspan0\x00', 'caif0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff], 0xee, 0x176, 0x1ee, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'snmp\x00'}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x0, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', {0x6}}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x9, 0x6, 0x4, 0x0, 0x0, "1c668913cf614e5f77f08620182f4d7a2870e8f6311e87a59a1e96f2b2cdbc53cfcef2f63f8e3e6f6ad6d820ea0919f25b08d098b7cee02e2fd4241fdb4813d5"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x9, 0x31, 0x8809, 'ip6gretap0\x00', 'ip_vti0\x00', 'veth1_to_team\x00', 'nr0\x00', @multicast, [0xff, 0x0, 0xff, 0xff], @random="607939dbb5a8", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x896, 0x896, 0x90e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x0, 0x0, 0x3, {0x2}}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x4}, {0x80, 0x3}, {0x7f, 0x3}, {0x8}, {0x5, 0x2}, {0x9, 0x2}, {0x8001, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x3}, {0xf}], [{0x4, 0x1}, {0x102, 0x200}, {0x3, 0x8000}, {0x5, 0xe8}, {0x7}, {0x7fff, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x10001}, {0x7, 0x101}, {0x5, 0x9}], 0x0, 0x4}, {[{0x6, 0x3}, {0x5, 0x1}, {0x80000001}, {}, {0x2, 0x2}, {0x40973a77, 0x2}, {0x0, 0x1}, {0x8000, 0x2}, {0x90, 0x2}, {0xff, 0x3}, {0x1ff, 0x2}], [{0x10000, 0x7}, {0xff, 0x1000}, {0x2800000, 0xff}, {0x933, 0x1}, {0x6, 0x3}, {0x6, 0xff}, {0x200, 0x7}, {0x7, 0xe567}, {0x80, 0x5}, {0x6, 0x3f}, {0x8, 0x3}], 0x6, 0x8}, {[{0x2, 0x2}, {0x1}, {0x101, 0x2}, {0xf935, 0x3}, {0x5, 0x3}, {0x7f}, {0xe266}, {0x1}, {0x800}, {0x1, 0x3}, {0x99}], [{0x2, 0x65aa}, {0xff, 0xfffffffe}, {0x0, 0x9}, {0x4f, 0x2}, {0x0, 0x67f2aed9}, {0x10000, 0x75c3}, {0x17a}, {0x101}, {0x3, 0x1}, {0xb7f33f5}, {0x8001, 0x10001}], 0xb, 0xb}, {[{0x7fff, 0x1}, {0x3}, {0x6, 0x1}, {0xd3, 0x1}, {0x6}, {0x10001, 0x1}, {0x2}, {0xffffff00, 0x1}, {0xa09d, 0x2}, {0x3, 0x1}, {0xfdf}], [{0xdaa, 0x53}, {0x7, 0x7}, {0xff, 0x8c29}, {0x0, 0x9a28}, {0x5, 0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x8, 0x4a37}, {0x4, 0x7fff}, {0x8, 0x6a}, {0xfffffffd, 0x4}], 0x0, 0xa}, {[{0xffff6699, 0x1}, {0x30, 0x3}, {0x5, 0x1}, {0x3f, 0x3}, {0x4, 0xae112ad9c4e9edcc}, {0x0, 0x2}, {0x80000000, 0x2}, {0x40}, {0xd4}, {0x7}, {0x40}], [{0xf2a, 0x9}, {0x8, 0x7}, {0xdd1, 0x7}, {0x4, 0x6}, {0x5, 0x1000}, {0xffffff23, 0x7f}, {0x7f, 0x3}, {0x401, 0x7}, {0x2, 0x4}, {0x5, 0x5}, {0xfb}], 0xa, 0xb}, {[{0x4, 0x2}, {0x2, 0x2}, {0x80000000, 0x3}, {0x4, 0x2}, {0xfffffffa}, {0x4}, {0xb8, 0x3}, {0x1, 0x2}, {0x3f, 0x2}, {0x81, 0x3}, {0x577, 0x2}], [{0x7ff, 0x2}, {0x0, 0xfffffff8}, {0x6, 0x2}, {0x7, 0x80000000}, {0x8, 0x7}, {0x950, 0xfff}, {0x6, 0x2}, {0x101, 0x1}, {0x80000000, 0x2f2c29e4}, {0xc1, 0x4}, {0x7f, 0x6}], 0xb, 0x9}, {[{0x200, 0x3}, {0x1, 0x2}, {0x4, 0x3}, {}, {0x8, 0x2}, {0x8ae, 0x1}, {0x401, 0x3}, {0xffffff9a, 0x2}, {0x800, 0x3}, {0x3, 0x1}, {0x4}], [{0xffffffff, 0x57}, {0x4, 0xd38f}, {0x3, 0x401}, {0x1, 0x3}, {0xff, 0x2}, {0x80, 0x4}, {0x40, 0x4}, {0x9, 0xe34}, {}, {0x1ff, 0x4}, {0x10000, 0x9}], 0x0, 0x6}, {[{0x9663}, {0x1, 0x3}, {0xc6b, 0x2}, {0x400, 0x5}, {0x80000000, 0x3}, {0xed4d}, {0x8, 0x3}, {0x4, 0x1}, {0x400, 0x2}, {0x6, 0x3}, {0x80, 0x2}], [{0x3, 0x1f}, {0xd26, 0x1}, {0x5, 0x745}, {0x7, 0x4}, {0xa5ea, 0x20}, {0x2, 0x1}, {0x6, 0x8}, {0x5}, {0x2, 0xffff}, {0xeb, 0xffffffff}, {0x7, 0xffff}], 0xa, 0x7}, {[{0x2af, 0x2}, {0x70}, {0xfffffffe}, {0x9, 0x1}, {0x3, 0x1}, {0x6}, {0xfffffa0a, 0x2}, {0xae83, 0x1}, {0x3, 0x3}, {0x40, 0x1}, {0x5}], [{0x3, 0x3b}, {0x3ff, 0x2}, {0x972, 0xfffffffa}, {0xe774, 0xffffffff}, {0x1b447e2e}, {0x80000001, 0x1}, {0x7e, 0xb4b5}, {0x4, 0xd4}, {0x9000000, 0xffff0001}, {0x8000, 0x1}, {0x100, 0x80000000}], 0x2, 0x6}, {[{0x52, 0x1}, {0x0, 0x1}, {0x9}, {0xffffe29f}, {0xb336, 0x2}, {0x9, 0x1}, {0xa1, 0x1}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}], [{0x40, 0x7}, {0x800, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x81, 0x9}, {0x65b8bbcd, 0x6e54}, {0x1, 0x9}, {0x0, 0x8}, {0x1000, 0x7}, {0x200, 0x401}], 0x7, 0x1}, {[{}, {0x0, 0x2}, {0x80000000}, {0xffff7fff, 0x3}, {0x1f, 0x1}, {0x20, 0x2}, {0x4, 0x1}, {0x9, 0x1}, {0x2d}, {0xfffffffe, 0x3}, {0x1, 0x3}], [{0x7fffffff, 0x8}, {0x0, 0x6}, {0x4}, {0x7, 0x4}, {0x4, 0x1}, {0x8001, 0x6}, {0xffff, 0x3d429c80}, {0x0, 0x4}, {0x20, 0x8}, {0x7, 0x7}, {0x30000000, 0x497b2e70}], 0x0, 0x7}], 0x6, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x10001, 0x1f55, 0x200, 0x0, 0x0, "eaca6dba37c71d0c377a40a5bec37a6382f0117136232330732126d305df881695ac49bd7531ab4c9af1ffcf2763d7f25744e284093d9838667c313ee4e999ae"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x0, 0x88fb, 'macvtap0\x00', 'nr0\x00', 'vxcan1\x00', 'ip6_vti0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0x0, 0xff], 0xbe, 0x11e, 0x156, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@private=0xa010100, [0x0, 0xff000000, 0x0, 0xffffff00], 0x4e24, 0x5c, 0x0, 0x4e21, 0x10, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}}]}]}, 0xd5a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r9, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x8c, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x97a}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r10 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 544.066479][T19752] overlayfs: unrecognized mount option "wordir=./file0" or missing value [ 544.088530][ T29] audit: type=1804 audit(1593024402.208:42): pid=19746 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/294/file0/bus" dev="loop2" ino=2 res=1 18:46:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 544.194787][ T29] audit: type=1804 audit(1593024402.268:43): pid=19757 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/294/file0/bus" dev="loop2" ino=2 res=1 18:46:42 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:42 executing program 5: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x44200, 0x0) read$qrtrtun(r2, &(0x7f0000000340)=""/11, 0xb) close(r1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={r4, 0x35, "99cf5dfbafcdc5bbfbed6a0ad002ebebe79a6936ec884ade0bab4c10ce2ec0582ad5efa4f4efe7ebec6210050febb737aa3520fe7d"}, &(0x7f00000001c0)=0x3d) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r5, 0x8}, &(0x7f00000002c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x273}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcf}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48840}, 0x4c855) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r7, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) setpriority(0x2, 0x0, 0x10001) 18:46:42 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) inotify_init() mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000000c0)={0x100000, 0x100000, 0xffff, 0x40}) r5 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 18:46:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 544.473109][T19769] overlayfs: missing 'lowerdir' 18:46:42 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 544.623978][ T29] audit: type=1804 audit(1593024402.748:44): pid=19770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/295/file0/bus" dev="loop2" ino=2 res=1 18:46:42 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "732edd0bf504246ddc0e68846da5ccd6e3ff577c"}, 0x15, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x3ff, @local, 0x4}, {0xa, 0x4e20, 0xb1d3, @dev={0xfe, 0x80, [], 0x20}, 0xf59}, 0x4, [0x81, 0x2, 0x7f, 0x9, 0xc50, 0xfff, 0x20, 0x1000]}, 0x5c) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0xa1, 0x1, [0x8]}, 0xa) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)={0x3, 0x100}) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r6, 0x80045510, &(0x7f0000000000)=0x1) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 18:46:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:42 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 544.921304][T19789] overlayfs: unrecognized mount option "Ô/î¶ó”„¢>šworkdir=./file0" or missing value 18:46:43 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0x8000, 0x7}, 0x2b}, 0x10) 18:46:43 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00000f040000000000000000"], 0x14}}, 0x0) [ 545.090904][ T29] audit: type=1804 audit(1593024403.218:45): pid=19790 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/296/file0/bus" dev="loop2" ino=2 res=1 18:46:43 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 545.283307][T19802] overlayfs: workdir and upperdir must be separate subtrees [ 545.308174][T19806] overlayfs: workdir and upperdir must be separate subtrees 18:46:43 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@nfs_export_off='nfs_export=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 18:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x581}, 0x20}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 545.517213][ T29] audit: type=1804 audit(1593024403.638:46): pid=19809 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/297/file0/bus" dev="loop2" ino=2 res=1 18:46:43 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 545.586593][T19813] overlayfs: bad mount option "redirect_dir=./file0" 18:46:43 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 545.639781][T19818] overlayfs: bad mount option "redirect_dir=./file0" 18:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:43 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x26}, 0x7}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x7, @local, 0x3}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x9}, @in={0x2, 0x4e21, @local}], 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 545.839587][ T29] audit: type=1804 audit(1593024403.968:47): pid=19825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/298/file0/bus" dev="loop2" ino=2 res=1 18:46:44 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 546.059181][T19834] overlayfs: workdir and upperdir must be separate subtrees [ 546.153145][ T29] audit: type=1804 audit(1593024404.278:48): pid=19841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/299/file0/bus" dev="loop2" ino=2 res=1 18:46:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x200200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x80000000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x1) 18:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x581}, 0x20}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:44 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="770000000069723d2e2f663c2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c6530af00"]) 18:46:44 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 546.394895][T19856] overlayfs: unrecognized mount option "w" or missing value 18:46:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) [ 546.435535][T19859] overlayfs: unrecognized mount option "w" or missing value 18:46:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)={0x3ff, {{0xa, 0x4e24, 0x8, @mcast2, 0xce}}, 0x1, 0x1, [{{0xa, 0x0, 0x16d0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}]}, 0x110) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x0, 0x2, 0x7, 0x1, 0x5}}) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1080841, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}]}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x4) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r8}, 0x10) [ 546.500318][ T29] audit: type=1804 audit(1593024404.628:49): pid=19858 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/300/file0/bus" dev="loop2" ino=2 res=1 18:46:44 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:44 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:44 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800004, 0x10010, r6, 0x100) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000000)) [ 546.973868][T19880] overlayfs: workdir and upperdir must be separate subtrees [ 547.015444][T19883] overlayfs: workdir and upperdir must be separate subtrees 18:46:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:45 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x581}, 0x20}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:45 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:45 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='file0,lowerdir=./file0,upperdir=./file0/../file0,\x00'/60]) [ 547.265195][T19896] overlayfs: unrecognized mount option "file0" or missing value 18:46:45 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 547.353551][T19903] overlayfs: unrecognized mount option "file0" or missing value 18:46:45 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) clock_gettime(0x1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:45 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) [ 547.706625][T19913] overlayfs: workdir and upperdir must be separate subtrees [ 547.802573][ T29] audit: type=1804 audit(1593024405.928:50): pid=19919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/304/bus" dev="sda1" ino=15771 res=1 18:46:46 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x24, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:46 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:46 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 18:46:46 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 548.075683][T19937] overlayfs: workdir and upperdir must be separate subtrees [ 548.117431][ T29] audit: type=1804 audit(1593024406.228:51): pid=19934 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/305/bus" dev="sda1" ino=16376 res=1 18:46:46 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) 18:46:46 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x44) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x4, 0x5}, {0x3f, 0x1}, 0x20, 0x4, 0x20}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r5, &(0x7f0000000180)='./bus\x00', &(0x7f00000002c0)=[&(0x7f0000000200)='(%]{/*#b&/#\x00', &(0x7f0000000240)='+/$$]\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='/dev/cachefiles\x00', &(0x7f0000000340)='}:,(/*)#--*!@#\x00', &(0x7f0000000380)='overlay\x00'], 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f8885f3f8302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66640000002f2e2e2f66696c65302c00"]) 18:46:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x24, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:46 executing program 1: unshare(0x2a000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae76, &(0x7f0000000080)) 18:46:46 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x10001) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:47 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:47 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4a00, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000000c0)) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) keyctl$search(0xa, r2, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 18:46:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x24, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:47 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) [ 549.004868][T19971] overlayfs: workdir and upperdir must be separate subtrees 18:46:47 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) [ 549.049692][T19976] overlayfs: workdir and upperdir must be separate subtrees 18:46:47 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:47 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='hostfs\x00', 0x40800, &(0x7f0000000140)='*@#+(/%}:I\\%)\x00') 18:46:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 549.417571][T19991] overlayfs: workdir and upperdir must be separate subtrees [ 549.439722][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 549.439736][ T29] audit: type=1804 audit(1593024407.558:54): pid=19985 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/308/file0/bus" dev="loop2" ino=2 res=1 [ 549.499080][T19991] overlayfs: workdir and upperdir must be separate subtrees 18:46:47 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:47 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$fb(r4, &(0x7f00000002c0)=""/249, 0xf9) [ 549.772551][T20005] overlayfs: workdir and upperdir must be separate subtrees 18:46:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x66c641, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000080)={0x3, 0x7cc5e789, 0xfc24}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:48 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:48 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) [ 549.978650][ T29] audit: type=1804 audit(1593024408.098:55): pid=20010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/309/file0/bus" dev="loop2" ino=2 res=1 18:46:48 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 550.281393][ T29] audit: type=1804 audit(1593024408.398:56): pid=20024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/310/file0/bus" dev="loop2" ino=2 res=1 18:46:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x40, 0x0, {0x0, 0x100000000000001}, {0x52, 0x2}, @period={0x5a, 0x3f, 0x1, 0xffff, 0x8, {0xdfaa, 0x7f}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x373) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:46:48 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:48 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 550.574964][T20032] overlayfs: workdir and upperdir must be separate subtrees 18:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:48 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x202080, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./file0,lowerdir=./file0,upperdar=./file0/../file0,\x00']) 18:46:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x8, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea4000023000505d25a80648c69940d0424fc6010000a400a000048051282c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) [ 550.782358][ T29] audit: type=1804 audit(1593024408.898:57): pid=20045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/311/file0/bus" dev="loop2" ino=2 res=1 18:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:49 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 550.889207][T20050] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 550.948034][T20053] overlayfs: unrecognized mount option "upperdar=./file0/../file0" or missing value [ 550.948458][T20050] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.986070][T20056] overlayfs: unrecognized mount option "upperdar=./file0/../file0" or missing value 18:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 551.086357][ T29] audit: type=1804 audit(1593024409.198:58): pid=20058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/312/file0/bus" dev="loop2" ino=2 res=1 18:46:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 18:46:49 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7740bb6469723d2c2f66696c65302c75707065046469723d2e2f66696c65302f2e2e2f66696c2c000000"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) fsetxattr$security_ima(r3, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "7ef0e7701af7bb18a40cc76e0eb1d829b34c6edd"}, 0x15, 0x1) 18:46:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x800, 0x2, 0x0, 0x0, 0x7, 0x600}, 0x20) 18:46:49 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:49 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) [ 551.286134][T20067] overlayfs: unrecognized mount option "low@»dir=" or missing value [ 551.324497][T20067] overlayfs: unrecognized mount option "low@»dir=" or missing value 18:46:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0xa0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}]}) [ 551.518640][ T29] audit: type=1804 audit(1593024409.638:59): pid=20079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/313/bus" dev="sda1" ino=15771 res=1 18:46:49 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)) 18:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:49 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x800, 0x2}, 0x20) 18:46:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24044804) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6(0xa, 0x800, 0xff) close(r6) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0xff31}]) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) 18:46:49 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:49 executing program 1: [ 551.875510][T20097] overlayfs: missing 'lowerdir' 18:46:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) [ 551.897667][ T29] audit: type=1804 audit(1593024410.019:60): pid=20100 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/314/bus" dev="sda1" ino=15846 res=1 [ 551.950229][T20102] overlayfs: missing 'lowerdir' 18:46:50 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 18:46:50 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/../file0\x00', 0xa0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x800, 0x0) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000240)=0x1, 0x4) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000002c0)=""/254, &(0x7f0000000000)=0xfe) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x116223, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000140)=0xffff8000) 18:46:50 executing program 1: 18:46:50 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 18:46:50 executing program 1: [ 552.227434][T20115] overlayfs: unrecognized mount option "worNeir=./file0" or missing value [ 552.243130][ T29] audit: type=1804 audit(1593024410.359:61): pid=20114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/315/bus" dev="sda1" ino=16383 res=1 18:46:50 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 552.286479][T20121] overlayfs: unrecognized mount option "worNeir=./file0" or missing value [ 552.523156][ T29] audit: type=1804 audit(1593024410.639:62): pid=20131 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/316/bus" dev="sda1" ino=15802 res=1 18:46:50 executing program 0: 18:46:50 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x10000) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r2, r3, &(0x7f00000000c0)=0xffffffffffffff7f, 0x3) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:50 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:50 executing program 1: 18:46:50 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/111) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:50 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:50 executing program 1: 18:46:50 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x8000002}}, 0x10) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) [ 552.786536][ T29] audit: type=1804 audit(1593024410.899:63): pid=20144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/317/bus" dev="sda1" ino=16378 res=1 [ 552.820304][T20143] overlayfs: workdir and upperdir must be separate subtrees 18:46:51 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./file0,lowere0,upperdir=./file0/../file0,\x00'/60]) 18:46:51 executing program 1: 18:46:51 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:51 executing program 0: 18:46:51 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 553.072066][T20154] overlayfs: unrecognized mount option "lowere0" or missing value [ 553.109651][T20159] overlayfs: unrecognized mount option "lowere0" or missing value 18:46:51 executing program 1: 18:46:51 executing program 0: 18:46:51 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0xfffe, 0x7, 0x1f, 0xfffb}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 553.431265][T20172] overlayfs: workdir and upperdir must be separate subtrees [ 553.481120][T20174] overlayfs: workdir and upperdir must be separate subtrees 18:46:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x168, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0xcc3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa7e}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x68, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x2f}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @rand_addr=0x64010102}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfb000}]}]}, 0x168}}, 0x0) 18:46:51 executing program 1: 18:46:51 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:51 executing program 0: 18:46:51 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:51 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x21020, &(0x7f00000002c0)=ANY=[@ANYBLOB="776f726b6469723d2e3f66696c59302c6c01ed56f00d8a7ae9e9606f7765726469723d2e2f66696c652f66696c65302f2e2e2f66696c6530f23f4e6aae30b60219b0b73c06b6bf799b641b4a40c97d230bc724e833f71d6e58c17b6a1243e2d0ead8bccd8a6628f4b2fdeaac98b6826f7236eaee5e0fe3c5fe4c56a5a3e0ab7f70db7838fc99446488ebdec560edf960e00d03bd68317503ef6f409d24c21084eef7f94e3c5a6e1e00"/192]) 18:46:51 executing program 1: 18:46:51 executing program 0: 18:46:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66697c3d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c00da21a66605ecff7f64bf225c3f7ceaf240b7830434f955d7e28c1959b2591e4942577d0db7b523f039db3011d17f6e17a508d42a6e59809e7f4cc6f9b78886c39e584f9562ea9797a0ac64dd4588"]) 18:46:52 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:52 executing program 1: 18:46:52 executing program 0: [ 554.058029][T20199] overlayfs: missing 'lowerdir' [ 554.112102][T20204] overlayfs: missing 'lowerdir' 18:46:52 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:52 executing program 1: 18:46:52 executing program 0: 18:46:52 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:52 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x20, 0x1, 0x3}}, 0x14) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:52 executing program 0: 18:46:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e000700"/14], 0x14}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x2, 0x66d3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990903, 0x2, [], @p_u16=&(0x7f0000000040)=0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="256100000000000000000000000008000500ac1e000108000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400e0000001"], 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x890) 18:46:52 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:52 executing program 1: 18:46:52 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:52 executing program 0: 18:46:52 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r6], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x950}, 0x804d) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1010020, &(0x7f00000002c0)={[{@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './bus'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise='dont_appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, ',\xbd'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x39, 0x64, 0x7, 0x34, 0x5b, 0x39], 0x2d, [0x0, 0x36, 0x63, 0x64], 0x2d, [0x39, 0x64, 0x32, 0x64], 0x2d, [0x64, 0x63, 0x52, 0x66], 0x2d, [0x33, 0x37, 0x36, 0x38, 0x66, 0x38, 0x32, 0x39]}}}, {@euid_gt={'euid>', r7}}]}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) syz_open_pts(r8, 0x0) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000400)) 18:46:52 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:52 executing program 1: 18:46:52 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, @in={0x2, 0x4e24, @multicast1}], 0x2c) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:52 executing program 0: 18:46:52 executing program 1: 18:46:52 executing program 0: [ 554.774728][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 554.774742][ T29] audit: type=1804 audit(1593024412.889:69): pid=20233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/323/file0/bus" dev="sda1" ino=16382 res=1 [ 554.927478][T20247] overlayfs: workdir and upperdir must be separate subtrees 18:46:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0xff31}]) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000004", @ANYRES16=r1, @ANYBLOB="6b7600000000000000000f000000"], 0x14}}, 0x0) 18:46:53 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:53 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x0, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:53 executing program 0: 18:46:53 executing program 1: 18:46:53 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x46ebc9b992894673, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f00000000c0)={0x28, 0x16, 0x15, 0x1a, 0x2, 0x100, 0x0, 0x16d, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r8, 0xfffffff8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:53 executing program 0: 18:46:53 executing program 1: 18:46:53 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x0, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 555.225978][T20259] overlayfs: workdir and upperdir must be separate subtrees 18:46:53 executing program 1: [ 555.300929][T20264] overlayfs: workdir and upperdir must be separate subtrees 18:46:53 executing program 0: 18:46:53 executing program 1: [ 555.344588][ T29] audit: type=1804 audit(1593024413.459:70): pid=20261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/324/file0/bus" dev="sda1" ino=15850 res=1 18:46:53 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x0, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:53 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:53 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:53 executing program 0: 18:46:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x24000000) 18:46:53 executing program 1: 18:46:53 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:53 executing program 1: 18:46:53 executing program 0: 18:46:53 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 555.804034][ T29] audit: type=1804 audit(1593024413.919:71): pid=20286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/325/file0/bus" dev="sda1" ino=15850 res=1 18:46:54 executing program 1: 18:46:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) statx(r2, &(0x7f0000000000)='./bus\x00', 0x1000, 0x430, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f6669659f2c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c00"/54]) 18:46:54 executing program 0: 18:46:54 executing program 1: [ 556.065078][T20305] overlayfs: missing 'lowerdir' [ 556.093103][ T29] audit: type=1804 audit(1593024414.209:72): pid=20302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/326/file0/bus" dev="sda1" ino=16374 res=1 18:46:54 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:54 executing program 0: [ 556.145747][T20305] overlayfs: missing 'lowerdir' [ 556.431498][ T29] audit: type=1804 audit(1593024414.549:73): pid=20313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/327/file0/bus" dev="sda1" ino=15774 res=1 18:46:54 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x19, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = dup(r1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000340)={[{0xffffff0e, 0x6, 0xfe, 0x6, 0x6, 0x9, 0xf6, 0x1, 0x16, 0x5, 0x8, 0x6d, 0xe70}, {0x60, 0x81, 0x4, 0xc0, 0x3f, 0x3f, 0x8, 0x7, 0x50, 0x1, 0x75, 0x20, 0x8}, {0x3, 0xce0, 0x1, 0x5, 0x3, 0x6, 0xfa, 0x6, 0x3f, 0x9, 0x80, 0x8, 0x401}], 0x3f}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000280)={0xa, 0x1, [{0x468179f4, 0x0, 0x4}, {0x1}, {0x4ea, 0x0, 0x100}, {0x400, 0x0, 0x4}, {0x10001, 0x0, 0x7}, {0x5, 0x0, 0x9}, {0x2, 0x0, 0x4}, {0xe000, 0x0, 0x1}, {0x800, 0x0, 0x200}, {0x9, 0x0, 0x3}]}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 18:46:54 executing program 1: 18:46:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) 18:46:54 executing program 0: 18:46:54 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:54 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) io_setup(0xc32f, &(0x7f0000001140)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) io_submit(r1, 0x25, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xd01000}]) keyctl$negate(0xd, 0x0, 0x0, 0x0) 18:46:54 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 18:46:54 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$netrom(r4, &(0x7f00000000c0)={{0x3, @null}, [@remote, @remote, @remote, @default, @netrom, @bcast, @rose, @netrom]}, &(0x7f0000000000)=0x48) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) [ 556.791417][ T29] audit: type=1804 audit(1593024414.909:74): pid=20328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/328/file0/bus" dev="sda1" ino=15770 res=1 18:46:54 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 556.890487][ T29] audit: type=1804 audit(1593024414.939:75): pid=20335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir837693813/syzkaller.f4lYbu/618/bus" dev="sda1" ino=15802 res=1 18:46:55 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x7ff, 0x20000) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000000000)=0xfffffffffffffdd1) accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0x80) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dcb0855730a6") syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') geteuid() geteuid() sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x34040811) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44035) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) getpgid(0x0) r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000000107050000000000000000000000000b0000000000000908000540000000030c00064000001000000000090840054000000000006ba6d2890b2907080002400000060e0800014000000001080002400000000608000140ffffffc01b00024000000044080240b6bc0000000598dc08000240fffffff71c00078008000240000000040108000140000000020c00024000000000000000050900010073797a30000000000800"/178], 0xbc}, 0x1, 0x0, 0x0, 0x80000}, 0x200440e4) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000045}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x81, 0x6, 0x1, 0x3ff, 0x0, 0x6, 0x22003, 0x6, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000480), 0x5}, 0x10a, 0x0, 0x5, 0x6, 0x20, 0x2, 0xfff}, 0x0, 0xb, r1, 0x1) socket$inet(0x2, 0x4, 0x6b) [ 557.005615][T20346] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore 18:46:55 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) [ 557.047717][ T29] audit: type=1804 audit(1593024414.949:76): pid=20335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir837693813/syzkaller.f4lYbu/618/bus" dev="sda1" ino=15802 res=1 [ 557.073051][T20346] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 557.125828][ T29] audit: type=1804 audit(1593024415.069:77): pid=20335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir837693813/syzkaller.f4lYbu/618/bus" dev="sda1" ino=15802 res=1 [ 557.158210][ T29] audit: type=1804 audit(1593024415.069:78): pid=20342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir837693813/syzkaller.f4lYbu/618/bus" dev="sda1" ino=15802 res=1 [ 557.161837][T20353] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 557.233610][T20353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:46:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e87, 0x70bd28, 0x40000000, {0xf}}, 0x14}}, 0x20000080) 18:46:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:55 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:55 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x3, &(0x7f00000001c0)) 18:46:55 executing program 1: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:55 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:55 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) [ 557.758239][T20380] overlayfs: missing 'lowerdir' 18:46:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) [ 557.822608][T20387] overlayfs: missing 'lowerdir' 18:46:56 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 18:46:56 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x23) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000140)={0x3a}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xa4, 0x40000) r5 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(r5, &(0x7f0000000200)={0x68, 0x11, "506ccc609621ccfd77f868321455c416ca37c39b5ec3b663f9849563bbcdbc10e1fa44fb401a56ae8b0de2c6652d9255e1c24419e859c8a0aed47bee313f68c97d6da9fdf125d967065fa9f04dddb50a18d2955a550143217ecbdcf4eaff984a"}, 0x6a2603) r6 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdir(&(0x7f00000002c0)='./bus\x00', 0xc2) umount2(&(0x7f00000000c0)='./bus\x00', 0x4) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="83daf3f96469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c00"]) 18:46:56 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:56 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:56 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, 0x0, 0x0, 0x0) 18:46:56 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:56 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./bus\x00', 0x0, 0x8}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in=@private}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x220008c, &(0x7f00000000c0)={[{@xino_on='xino=on'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:56 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, 0x0, 0x0, 0x0) 18:46:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffff81]) [ 558.485063][T20420] overlayfs: missing 'workdir' 18:46:56 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 18:46:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x16c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ffa87d9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff943}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffb}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:56 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:56 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f666994cadc826c6f7765726469723d2e2f66696c65302c08397065726469723d2e2fffff6c65302f2e2e2f66696c65302c00c138bc35f141628d1c84951f1f18ca60aa4d734a231bd565b3a309bf2a79ca7813cc285c371cb89f210c04b7b66bafe9687af55017847d64c0236fc53876280f9a5e215ed8473d1b7c456e896eb817ec73d1830422508cc7b8d599"]) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x800) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) accept4(r4, &(0x7f0000000100)=@vsock, &(0x7f0000000200)=0x80, 0x80800) 18:46:56 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, 0x0, 0x0, 0x0) 18:46:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:57 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 558.927331][T20442] overlayfs: unrecognized mount option "9perdir=./ÿÿle0/../file0" or missing value 18:46:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 558.980813][T20444] overlayfs: unrecognized mount option "9perdir=./ÿÿle0/../file0" or missing value [ 558.992352][ T2485] usb 2-1: new high-speed USB device number 2 using dummy_hcd 18:46:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:57 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c002336db9fa8bce9e6235e8a1b08f8c38279cafdb5ca5c2c7c373bcaa1d08a31574bb22efe5a192b9ec5e319f9582540ecdcc54da817a5fc59f746b5f3ed9c567e1f9d2fc56769430b396d3c4474e3fe29ee98d60dfc76bd303c943bd3cfaf08ce3edf246df3f6677b76bda9b033490d212867972fbb6879473bf8aa14fa24e04d58"]) [ 559.246357][ T2485] usb 2-1: Using ep0 maxpacket: 8 [ 559.366974][ T2485] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 559.404578][T20462] overlayfs: workdir and upperdir must be separate subtrees [ 559.407116][ T2485] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 559.449968][T20463] overlayfs: workdir and upperdir must be separate subtrees [ 559.451812][ T2485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.489659][ T2485] usb 2-1: config 0 descriptor?? [ 559.547461][ T2485] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 559.802013][ T4003] usb 2-1: USB disconnect, device number 2 18:46:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x34000) 18:46:58 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:58 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:58 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c7570706572dee71f7e2e2f66696c65302f2e2e2f66696c65302c00"]) 18:46:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x8, 0x0, 0x4}, 0x7ff}}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01864ba, &(0x7f0000000100)={0x1, 0x2, 0x7, 0xdededede}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="857e002000000000000000f2ff00"], 0x14}}, 0x0) 18:46:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:58 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) [ 560.444965][T20489] overlayfs: unrecognized mount option "upperÞç~./file0/../file0" or missing value [ 560.468311][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 560.468325][ T29] audit: type=1804 audit(1593024418.589:86): pid=20485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/335/file0/bus" dev="sda1" ino=16382 res=1 18:46:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:58 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) 18:46:58 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 560.520036][T20498] overlayfs: unrecognized mount option "upperÞç~./file0/../file0" or missing value 18:46:58 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x282, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000040)={{0x2, 0xffffffff, 0x1d1, 0xfd2, 0x9, 0x7b3}, 0x7, [0x7, 0x8, 0xbbf, 0x6e7, 0x4, 0x101, 0x1, 0x9d2, 0x7, 0x14000, 0x9, 0x1, 0x7, 0x1, 0x9, 0x9, 0x0, 0x3, 0x0, 0x7, 0x800, 0x6, 0x1, 0x6, 0x9c, 0x8, 0x612, 0x400, 0x3f, 0x9, 0x5, 0x80000001, 0x2, 0x4c, 0xfffffffd, 0x5, 0x8, 0x4fc3, 0x9, 0x5b, 0x3, 0x1, 0x6, 0x3, 0x9, 0x1, 0x9, 0x5, 0x8001, 0x1f, 0x6, 0xf94, 0x0, 0x5292, 0x401, 0x4, 0x517ad694, 0x8, 0x8, 0x2, 0x200, 0x9, 0x800, 0x3, 0x3, 0x7, 0xf117, 0x1a800da5, 0x9, 0x8001, 0x1fffe, 0x3, 0xfffc0000, 0x4, 0xf335, 0x8, 0x9fd, 0x5, 0x7, 0x10001, 0x10001, 0x3, 0x4, 0x9a8, 0xe68, 0x9, 0xfffffffb, 0x80, 0x7fffffff, 0x4, 0x646, 0x80, 0x6, 0x5, 0x9, 0x10000, 0x3, 0x7, 0x3, 0x7, 0x2, 0x5, 0x9, 0xb77, 0xa85d, 0x5, 0x8, 0x8, 0x0, 0xff, 0x2b2, 0xff, 0x5, 0x7, 0x942, 0x40, 0x4, 0xcb, 0xa5e8, 0x4, 0x5c, 0x8, 0x80000001, 0x401, 0x3f, 0x2, 0x4, 0x8, 0x1f, 0x8, 0x8, 0x1ff, 0x401, 0x3, 0x52, 0x6, 0xfffffffe, 0x100, 0x8000, 0x3, 0x7, 0x5, 0x4, 0xb6, 0x3ff, 0x3f, 0x8, 0x9, 0x5, 0x9, 0x1ff, 0x9454, 0x2, 0x8, 0x4, 0x80000000, 0x5f59, 0x3ff, 0x0, 0x7fff, 0x0, 0x8, 0x800, 0x2, 0x4, 0x800, 0x2, 0x6, 0xe9f1, 0x4, 0xffff, 0x5, 0xfffffffc, 0x3ff, 0x86, 0x2, 0x1, 0x2, 0x10000, 0x3, 0x63c, 0x8, 0x800, 0x10000, 0x6, 0x2, 0x200, 0x4, 0x200, 0x300, 0x200, 0x4, 0x20, 0x5, 0x2, 0x7ff, 0x990, 0x1, 0x5, 0x3, 0x1, 0x1, 0xde36, 0x29b, 0x9, 0x1, 0x1, 0x0, 0x7, 0xd959, 0x8, 0x5, 0x9, 0x8, 0x1, 0x80, 0x20, 0x929, 0x0, 0x6, 0x4, 0x20, 0x10000, 0x7f, 0x6, 0xfffffffc, 0x101, 0x3, 0x3, 0x4, 0x5, 0x7, 0x8, 0x8, 0xfff, 0x5, 0x100, 0xffffffff, 0x3, 0x1, 0x2, 0x7ff, 0x4, 0x74, 0xff, 0x4, 0x80, 0xfffffff9, 0x6, 0x8, 0x9, 0x2, 0xfffffff9, 0x80000000, 0x9, 0x2, 0x6, 0x7, 0x6, 0x9, 0xff, 0x3, 0x3, 0x0, 0x40, 0x7, 0x3, 0x0, 0x400, 0x5, 0x281, 0x6, 0x101, 0x8, 0x9, 0x9, 0x1, 0x7f, 0xfffffffa, 0xbb9, 0x5, 0x0, 0x8001, 0x7, 0x3, 0x9, 0x4, 0x2a, 0x10001, 0x0, 0xb09, 0x8, 0x80, 0x9, 0x4, 0x1, 0x80000001, 0x7f, 0x8, 0x3, 0x1ff, 0x2, 0x9, 0x6, 0x20, 0x5, 0x7, 0x9, 0x5, 0x312, 0xccb4, 0x4, 0x2, 0x400, 0x8, 0x1, 0xfffffffe, 0x6e, 0x1, 0x8001, 0xba7, 0x0, 0x91, 0x8001, 0x789e, 0x3, 0x9, 0x7f, 0xd39, 0x7, 0xff, 0xbf3, 0x6, 0x81, 0x79, 0xfffffff7, 0x1ff, 0x885b, 0xa7f, 0xd0, 0x80000001, 0x7, 0x1, 0x9, 0x7, 0x4, 0x2, 0x2, 0x1, 0x1, 0xffff, 0xe97, 0x0, 0x3ff, 0xa00000, 0x2, 0x200, 0x0, 0x3, 0xb4a, 0x101, 0x69, 0x80, 0xf292, 0x8, 0x4, 0x1, 0x5, 0x9, 0x3, 0x749, 0x10000, 0xffff, 0x7f, 0x80000001, 0xc4, 0x80000000, 0x8, 0x0, 0x266c, 0x6, 0x72, 0x6, 0x7, 0x1, 0x8f, 0x3000, 0x3, 0x8, 0x80000000, 0x8, 0x36e, 0x1, 0x3, 0x1f, 0x1ff, 0xffffffc0, 0x14, 0x6, 0x9, 0x4, 0x1000, 0x100, 0xffffffb2, 0xf, 0x7, 0x2, 0xec1, 0x4, 0x3, 0x3, 0x5, 0x5e788a42, 0x10001, 0xff, 0x7fffffff, 0x6, 0x6, 0xfffffffd, 0x5, 0x0, 0x2, 0x8a6, 0x2800, 0x1, 0x373, 0x9, 0x7, 0x10000, 0x40, 0x6, 0x3, 0x10000, 0x81, 0x7, 0xbc4f, 0x4, 0x9, 0x80, 0x100, 0x5, 0xffffffff, 0x80, 0x2, 0x4, 0x0, 0x3, 0x6, 0x3ff, 0x1000, 0x1ff, 0x6, 0x712badf7, 0x5, 0x4, 0x9, 0x4, 0x9, 0xe75a, 0x3, 0xa8, 0x3f2f, 0xffffffff, 0xa41, 0x8, 0x7, 0x7ff, 0x9, 0x2, 0x9, 0x7fb, 0x100, 0x320, 0x49f, 0xffffff81, 0x1, 0x200, 0x3, 0x5, 0x3, 0x80, 0x80000000, 0x1e3b, 0x3f, 0x0, 0x1, 0x1, 0x43c7a438, 0x3, 0xfffffff9, 0x9, 0x8, 0x2, 0x7, 0xfffffffb, 0x0, 0x1ff, 0x3, 0x3, 0xc37, 0x8, 0x200, 0xaef2, 0xfffffffd, 0x2, 0x6, 0xffffffff, 0x80, 0x4, 0x2, 0x20, 0x401, 0x1756, 0x7, 0x9, 0x9, 0x5, 0x7360cfb1, 0x8, 0x2, 0x1ff, 0x3ff, 0xfff, 0x5, 0x22, 0x100, 0x7ff, 0x1f, 0x20, 0xf78, 0x2, 0x1, 0x1, 0x3ff, 0x401, 0xb0, 0x40, 0x4, 0x3c1, 0x8, 0x9, 0x20, 0xc6, 0x100, 0x1, 0x8001, 0x4, 0x0, 0x8, 0x0, 0x3, 0x5, 0x1ff, 0x6, 0x2, 0x882, 0x5, 0x80000001, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5, 0x1, 0x4, 0x6, 0x0, 0xfff, 0x10001, 0xfffff485, 0x7ff, 0x1ff, 0x0, 0x6, 0x5c0, 0x237c612e, 0x4, 0x1, 0x20, 0x8, 0x7fff, 0xd9e, 0x101, 0x5, 0x40, 0x7, 0x39dd, 0x71e4, 0x6, 0x2, 0xff, 0x3ff, 0x3, 0x9, 0x0, 0x4, 0x52, 0x0, 0xffff, 0x80000001, 0x7, 0x3, 0x1, 0x6, 0x6, 0x7, 0x3, 0xffff, 0x4, 0x3, 0xfff, 0x1, 0x20, 0x6, 0x4, 0x7c, 0x4, 0x400, 0x8001, 0x7d0, 0x9, 0x1, 0x8, 0x9, 0x2, 0xfa5, 0x8, 0x81, 0x80000000, 0x1ff, 0x5, 0x2, 0x1ff, 0x101, 0x5, 0x3, 0x40, 0x0, 0x80, 0xfffffbff, 0x1, 0x8, 0x8, 0x1, 0x36, 0x8000, 0x100, 0x100, 0x0, 0x200, 0x1, 0x6df9, 0x6, 0x1, 0x90b, 0x7, 0x8d4, 0x7, 0x1, 0x8, 0x2, 0xd20c, 0x9, 0xfffffdd2, 0x401, 0xe4e, 0x40, 0x3ff, 0x7, 0x401, 0x7, 0xfffff000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, 0x1, 0xae, 0x7, 0x6, 0x2, 0x3, 0x40, 0x2, 0x3, 0x200, 0x80, 0x4, 0x3ff, 0x5, 0xffffffff, 0x71b, 0x8001, 0xffff, 0x0, 0xbc3c, 0x20, 0x4, 0x0, 0x0, 0x8, 0x9, 0x66, 0x7d, 0x8, 0x6, 0x1, 0x6, 0x3, 0x20, 0x5, 0x5, 0x8001, 0x4, 0x1ff, 0x0, 0x0, 0x80000001, 0x200, 0x2, 0x4, 0x6, 0x2, 0x3, 0x7, 0x4, 0x616f, 0xe, 0x5, 0x0, 0xb824, 0x5, 0x2148, 0x8, 0x800, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x9, 0x8000, 0x4f6, 0xf48a, 0x0, 0x3, 0xff, 0xf6b, 0xfffffff7, 0x9, 0x2, 0xe9dd, 0x40, 0x2be, 0x101, 0x4, 0x5, 0x2, 0x966b, 0x2, 0x1, 0xf0, 0x5, 0x9, 0x401, 0x9, 0x101, 0x400, 0xfff, 0x20, 0x1ff, 0x3ff, 0x1, 0x1, 0x43, 0x5, 0x200, 0x7, 0xc2b, 0x7ff, 0x4, 0xffff7fff, 0x0, 0x7, 0xffff8f15, 0x3, 0xe8, 0x7ff, 0x9, 0x0, 0x8, 0x2, 0x9a8, 0x3, 0x1, 0x10001, 0x4, 0x1ff, 0xfff, 0x6, 0x0, 0x7, 0x3, 0x7fffffff, 0x0, 0x7, 0x7ff, 0x1400, 0xff, 0x8, 0x64, 0x0, 0x10000, 0xf317, 0x4, 0x1, 0x7, 0xffffffff, 0x3, 0x0, 0x1, 0x3, 0x8, 0x51, 0x9, 0x3610, 0x5, 0x10001, 0x4, 0xfffffffc, 0x8, 0x255, 0x8001, 0x7f, 0xe2a9, 0x17d5, 0x1, 0x7ff, 0x6, 0x30a, 0x5, 0x7f, 0xf9, 0x2, 0xd55, 0xfba, 0x20, 0x3, 0x57, 0x9e, 0xad1c26e, 0x70, 0x7, 0x1, 0x2, 0x3ff, 0x9, 0x2, 0x4, 0x0, 0x100, 0x7f, 0x8000, 0x2, 0x10000, 0x2, 0x6, 0x9, 0x4, 0x6, 0x101, 0x1, 0xfffffffd, 0x7fff, 0x1000, 0xdde, 0x401, 0xffffc71c, 0x10000, 0x7, 0x7fffffff, 0x62a6, 0x80, 0x84d4, 0x32e, 0x6, 0x1000, 0xffffffff, 0x100, 0x9, 0xae, 0xf8, 0x20, 0x80, 0x3, 0x6, 0x9, 0x6, 0x3, 0xa6, 0x0, 0x2, 0x0, 0xa843, 0x3, 0x2, 0x10001, 0x4, 0x5, 0x7, 0xffffffff, 0x3ff, 0x80000000, 0x1, 0x80000000, 0x2, 0x101, 0x4, 0x80000000, 0x9, 0x80000000, 0x3, 0x1f, 0x3, 0x7fffffff, 0x5, 0xdb, 0x4, 0x6, 0x6, 0x6, 0x7f, 0x6, 0x6, 0xdf, 0x80000000, 0x7, 0x8, 0x0, 0x100, 0xc8, 0x1, 0x5, 0x8, 0x4, 0x0, 0x6000, 0x2, 0x7, 0x7, 0x7f, 0xfb8, 0x3f, 0x0, 0x0, 0x8, 0x0, 0x9, 0x4, 0x7, 0x4, 0x66, 0x3, 0x8, 0xbd, 0x40, 0x7f, 0x4, 0x0, 0x5, 0x200, 0x3f, 0xffffffff, 0x100, 0x1, 0x7fffffff, 0x40, 0x7, 0x1f, 0x7, 0x1, 0x5, 0xbd3, 0x7, 0x0, 0x9024620, 0x9, 0x66c, 0x80000000, 0x8000, 0x80000001, 0x3, 0x43, 0x0, 0x1, 0x7, 0x0, 0xa4, 0x8, 0x401, 0x2, 0x63a7efad, 0x3ff, 0x5, 0xffffffff, 0x3, 0x6, 0x20, 0x8000, 0x6, 0x65a9ba58, 0xfffffffb, 0x8001, 0xadc9, 0x10001, 0x1, 0x8, 0x4, 0x3ff, 0x8]}) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:46:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:58 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000200)={[0x8]}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xf8, r8, 0xffff}, 0xf8}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xe8, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008801}, 0x4004) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x20000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f66201a7dd32ce9c35ec8300f038232a2d6cf4d74c0b481de8512a249e4c6378cbccfad15d81f00066092e84d2b998e2c8db1f166a1ae55f6000000000000000000000000000000c315d8e8b6b75923"]) [ 560.801583][ T29] audit: type=1804 audit(1593024418.919:87): pid=20510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/336/file0/bus" dev="sda1" ino=16379 res=1 18:46:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000040)={{0x2, 0xffffffff, 0x1d1, 0xfd2, 0x9, 0x7b3}, 0x7, [0x7, 0x8, 0xbbf, 0x6e7, 0x4, 0x101, 0x1, 0x9d2, 0x7, 0x14000, 0x9, 0x1, 0x7, 0x1, 0x9, 0x9, 0x0, 0x3, 0x0, 0x7, 0x800, 0x6, 0x1, 0x6, 0x9c, 0x8, 0x612, 0x400, 0x3f, 0x9, 0x5, 0x80000001, 0x2, 0x4c, 0xfffffffd, 0x5, 0x8, 0x4fc3, 0x9, 0x5b, 0x3, 0x1, 0x6, 0x3, 0x9, 0x1, 0x9, 0x5, 0x8001, 0x1f, 0x6, 0xf94, 0x0, 0x5292, 0x401, 0x4, 0x517ad694, 0x8, 0x8, 0x2, 0x200, 0x9, 0x800, 0x3, 0x3, 0x7, 0xf117, 0x1a800da5, 0x9, 0x8001, 0x1fffe, 0x3, 0xfffc0000, 0x4, 0xf335, 0x8, 0x9fd, 0x5, 0x7, 0x10001, 0x10001, 0x3, 0x4, 0x9a8, 0xe68, 0x9, 0xfffffffb, 0x80, 0x7fffffff, 0x4, 0x646, 0x80, 0x6, 0x5, 0x9, 0x10000, 0x3, 0x7, 0x3, 0x7, 0x2, 0x5, 0x9, 0xb77, 0xa85d, 0x5, 0x8, 0x8, 0x0, 0xff, 0x2b2, 0xff, 0x5, 0x7, 0x942, 0x40, 0x4, 0xcb, 0xa5e8, 0x4, 0x5c, 0x8, 0x80000001, 0x401, 0x3f, 0x2, 0x4, 0x8, 0x1f, 0x8, 0x8, 0x1ff, 0x401, 0x3, 0x52, 0x6, 0xfffffffe, 0x100, 0x8000, 0x3, 0x7, 0x5, 0x4, 0xb6, 0x3ff, 0x3f, 0x8, 0x9, 0x5, 0x9, 0x1ff, 0x9454, 0x2, 0x8, 0x4, 0x80000000, 0x5f59, 0x3ff, 0x0, 0x7fff, 0x0, 0x8, 0x800, 0x2, 0x4, 0x800, 0x2, 0x6, 0xe9f1, 0x4, 0xffff, 0x5, 0xfffffffc, 0x3ff, 0x86, 0x2, 0x1, 0x2, 0x10000, 0x3, 0x63c, 0x8, 0x800, 0x10000, 0x6, 0x2, 0x200, 0x4, 0x200, 0x300, 0x200, 0x4, 0x20, 0x5, 0x2, 0x7ff, 0x990, 0x1, 0x5, 0x3, 0x1, 0x1, 0xde36, 0x29b, 0x9, 0x1, 0x1, 0x0, 0x7, 0xd959, 0x8, 0x5, 0x9, 0x8, 0x1, 0x80, 0x20, 0x929, 0x0, 0x6, 0x4, 0x20, 0x10000, 0x7f, 0x6, 0xfffffffc, 0x101, 0x3, 0x3, 0x4, 0x5, 0x7, 0x8, 0x8, 0xfff, 0x5, 0x100, 0xffffffff, 0x3, 0x1, 0x2, 0x7ff, 0x4, 0x74, 0xff, 0x4, 0x80, 0xfffffff9, 0x6, 0x8, 0x9, 0x2, 0xfffffff9, 0x80000000, 0x9, 0x2, 0x6, 0x7, 0x6, 0x9, 0xff, 0x3, 0x3, 0x0, 0x40, 0x7, 0x3, 0x0, 0x400, 0x5, 0x281, 0x6, 0x101, 0x8, 0x9, 0x9, 0x1, 0x7f, 0xfffffffa, 0xbb9, 0x5, 0x0, 0x8001, 0x7, 0x3, 0x9, 0x4, 0x2a, 0x10001, 0x0, 0xb09, 0x8, 0x80, 0x9, 0x4, 0x1, 0x80000001, 0x7f, 0x8, 0x3, 0x1ff, 0x2, 0x9, 0x6, 0x20, 0x5, 0x7, 0x9, 0x5, 0x312, 0xccb4, 0x4, 0x2, 0x400, 0x8, 0x1, 0xfffffffe, 0x6e, 0x1, 0x8001, 0xba7, 0x0, 0x91, 0x8001, 0x789e, 0x3, 0x9, 0x7f, 0xd39, 0x7, 0xff, 0xbf3, 0x6, 0x81, 0x79, 0xfffffff7, 0x1ff, 0x885b, 0xa7f, 0xd0, 0x80000001, 0x7, 0x1, 0x9, 0x7, 0x4, 0x2, 0x2, 0x1, 0x1, 0xffff, 0xe97, 0x0, 0x3ff, 0xa00000, 0x2, 0x200, 0x0, 0x3, 0xb4a, 0x101, 0x69, 0x80, 0xf292, 0x8, 0x4, 0x1, 0x5, 0x9, 0x3, 0x749, 0x10000, 0xffff, 0x7f, 0x80000001, 0xc4, 0x80000000, 0x8, 0x0, 0x266c, 0x6, 0x72, 0x6, 0x7, 0x1, 0x8f, 0x3000, 0x3, 0x8, 0x80000000, 0x8, 0x36e, 0x1, 0x3, 0x1f, 0x1ff, 0xffffffc0, 0x14, 0x6, 0x9, 0x4, 0x1000, 0x100, 0xffffffb2, 0xf, 0x7, 0x2, 0xec1, 0x4, 0x3, 0x3, 0x5, 0x5e788a42, 0x10001, 0xff, 0x7fffffff, 0x6, 0x6, 0xfffffffd, 0x5, 0x0, 0x2, 0x8a6, 0x2800, 0x1, 0x373, 0x9, 0x7, 0x10000, 0x40, 0x6, 0x3, 0x10000, 0x81, 0x7, 0xbc4f, 0x4, 0x9, 0x80, 0x100, 0x5, 0xffffffff, 0x80, 0x2, 0x4, 0x0, 0x3, 0x6, 0x3ff, 0x1000, 0x1ff, 0x6, 0x712badf7, 0x5, 0x4, 0x9, 0x4, 0x9, 0xe75a, 0x3, 0xa8, 0x3f2f, 0xffffffff, 0xa41, 0x8, 0x7, 0x7ff, 0x9, 0x2, 0x9, 0x7fb, 0x100, 0x320, 0x49f, 0xffffff81, 0x1, 0x200, 0x3, 0x5, 0x3, 0x80, 0x80000000, 0x1e3b, 0x3f, 0x0, 0x1, 0x1, 0x43c7a438, 0x3, 0xfffffff9, 0x9, 0x8, 0x2, 0x7, 0xfffffffb, 0x0, 0x1ff, 0x3, 0x3, 0xc37, 0x8, 0x200, 0xaef2, 0xfffffffd, 0x2, 0x6, 0xffffffff, 0x80, 0x4, 0x2, 0x20, 0x401, 0x1756, 0x7, 0x9, 0x9, 0x5, 0x7360cfb1, 0x8, 0x2, 0x1ff, 0x3ff, 0xfff, 0x5, 0x22, 0x100, 0x7ff, 0x1f, 0x20, 0xf78, 0x2, 0x1, 0x1, 0x3ff, 0x401, 0xb0, 0x40, 0x4, 0x3c1, 0x8, 0x9, 0x20, 0xc6, 0x100, 0x1, 0x8001, 0x4, 0x0, 0x8, 0x0, 0x3, 0x5, 0x1ff, 0x6, 0x2, 0x882, 0x5, 0x80000001, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5, 0x1, 0x4, 0x6, 0x0, 0xfff, 0x10001, 0xfffff485, 0x7ff, 0x1ff, 0x0, 0x6, 0x5c0, 0x237c612e, 0x4, 0x1, 0x20, 0x8, 0x7fff, 0xd9e, 0x101, 0x5, 0x40, 0x7, 0x39dd, 0x71e4, 0x6, 0x2, 0xff, 0x3ff, 0x3, 0x9, 0x0, 0x4, 0x52, 0x0, 0xffff, 0x80000001, 0x7, 0x3, 0x1, 0x6, 0x6, 0x7, 0x3, 0xffff, 0x4, 0x3, 0xfff, 0x1, 0x20, 0x6, 0x4, 0x7c, 0x4, 0x400, 0x8001, 0x7d0, 0x9, 0x1, 0x8, 0x9, 0x2, 0xfa5, 0x8, 0x81, 0x80000000, 0x1ff, 0x5, 0x2, 0x1ff, 0x101, 0x5, 0x3, 0x40, 0x0, 0x80, 0xfffffbff, 0x1, 0x8, 0x8, 0x1, 0x36, 0x8000, 0x100, 0x100, 0x0, 0x200, 0x1, 0x6df9, 0x6, 0x1, 0x90b, 0x7, 0x8d4, 0x7, 0x1, 0x8, 0x2, 0xd20c, 0x9, 0xfffffdd2, 0x401, 0xe4e, 0x40, 0x3ff, 0x7, 0x401, 0x7, 0xfffff000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, 0x1, 0xae, 0x7, 0x6, 0x2, 0x3, 0x40, 0x2, 0x3, 0x200, 0x80, 0x4, 0x3ff, 0x5, 0xffffffff, 0x71b, 0x8001, 0xffff, 0x0, 0xbc3c, 0x20, 0x4, 0x0, 0x0, 0x8, 0x9, 0x66, 0x7d, 0x8, 0x6, 0x1, 0x6, 0x3, 0x20, 0x5, 0x5, 0x8001, 0x4, 0x1ff, 0x0, 0x0, 0x80000001, 0x200, 0x2, 0x4, 0x6, 0x2, 0x3, 0x7, 0x4, 0x616f, 0xe, 0x5, 0x0, 0xb824, 0x5, 0x2148, 0x8, 0x800, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x9, 0x8000, 0x4f6, 0xf48a, 0x0, 0x3, 0xff, 0xf6b, 0xfffffff7, 0x9, 0x2, 0xe9dd, 0x40, 0x2be, 0x101, 0x4, 0x5, 0x2, 0x966b, 0x2, 0x1, 0xf0, 0x5, 0x9, 0x401, 0x9, 0x101, 0x400, 0xfff, 0x20, 0x1ff, 0x3ff, 0x1, 0x1, 0x43, 0x5, 0x200, 0x7, 0xc2b, 0x7ff, 0x4, 0xffff7fff, 0x0, 0x7, 0xffff8f15, 0x3, 0xe8, 0x7ff, 0x9, 0x0, 0x8, 0x2, 0x9a8, 0x3, 0x1, 0x10001, 0x4, 0x1ff, 0xfff, 0x6, 0x0, 0x7, 0x3, 0x7fffffff, 0x0, 0x7, 0x7ff, 0x1400, 0xff, 0x8, 0x64, 0x0, 0x10000, 0xf317, 0x4, 0x1, 0x7, 0xffffffff, 0x3, 0x0, 0x1, 0x3, 0x8, 0x51, 0x9, 0x3610, 0x5, 0x10001, 0x4, 0xfffffffc, 0x8, 0x255, 0x8001, 0x7f, 0xe2a9, 0x17d5, 0x1, 0x7ff, 0x6, 0x30a, 0x5, 0x7f, 0xf9, 0x2, 0xd55, 0xfba, 0x20, 0x3, 0x57, 0x9e, 0xad1c26e, 0x70, 0x7, 0x1, 0x2, 0x3ff, 0x9, 0x2, 0x4, 0x0, 0x100, 0x7f, 0x8000, 0x2, 0x10000, 0x2, 0x6, 0x9, 0x4, 0x6, 0x101, 0x1, 0xfffffffd, 0x7fff, 0x1000, 0xdde, 0x401, 0xffffc71c, 0x10000, 0x7, 0x7fffffff, 0x62a6, 0x80, 0x84d4, 0x32e, 0x6, 0x1000, 0xffffffff, 0x100, 0x9, 0xae, 0xf8, 0x20, 0x80, 0x3, 0x6, 0x9, 0x6, 0x3, 0xa6, 0x0, 0x2, 0x0, 0xa843, 0x3, 0x2, 0x10001, 0x4, 0x5, 0x7, 0xffffffff, 0x3ff, 0x80000000, 0x1, 0x80000000, 0x2, 0x101, 0x4, 0x80000000, 0x9, 0x80000000, 0x3, 0x1f, 0x3, 0x7fffffff, 0x5, 0xdb, 0x4, 0x6, 0x6, 0x6, 0x7f, 0x6, 0x6, 0xdf, 0x80000000, 0x7, 0x8, 0x0, 0x100, 0xc8, 0x1, 0x5, 0x8, 0x4, 0x0, 0x6000, 0x2, 0x7, 0x7, 0x7f, 0xfb8, 0x3f, 0x0, 0x0, 0x8, 0x0, 0x9, 0x4, 0x7, 0x4, 0x66, 0x3, 0x8, 0xbd, 0x40, 0x7f, 0x4, 0x0, 0x5, 0x200, 0x3f, 0xffffffff, 0x100, 0x1, 0x7fffffff, 0x40, 0x7, 0x1f, 0x7, 0x1, 0x5, 0xbd3, 0x7, 0x0, 0x9024620, 0x9, 0x66c, 0x80000000, 0x8000, 0x80000001, 0x3, 0x43, 0x0, 0x1, 0x7, 0x0, 0xa4, 0x8, 0x401, 0x2, 0x63a7efad, 0x3ff, 0x5, 0xffffffff, 0x3, 0x6, 0x20, 0x8000, 0x6, 0x65a9ba58, 0xfffffffb, 0x8001, 0xadc9, 0x10001, 0x1, 0x8, 0x4, 0x3ff, 0x8]}) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:46:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:59 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:46:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000040)={{0x2, 0xffffffff, 0x1d1, 0xfd2, 0x9, 0x7b3}, 0x7, [0x7, 0x8, 0xbbf, 0x6e7, 0x4, 0x101, 0x1, 0x9d2, 0x7, 0x14000, 0x9, 0x1, 0x7, 0x1, 0x9, 0x9, 0x0, 0x3, 0x0, 0x7, 0x800, 0x6, 0x1, 0x6, 0x9c, 0x8, 0x612, 0x400, 0x3f, 0x9, 0x5, 0x80000001, 0x2, 0x4c, 0xfffffffd, 0x5, 0x8, 0x4fc3, 0x9, 0x5b, 0x3, 0x1, 0x6, 0x3, 0x9, 0x1, 0x9, 0x5, 0x8001, 0x1f, 0x6, 0xf94, 0x0, 0x5292, 0x401, 0x4, 0x517ad694, 0x8, 0x8, 0x2, 0x200, 0x9, 0x800, 0x3, 0x3, 0x7, 0xf117, 0x1a800da5, 0x9, 0x8001, 0x1fffe, 0x3, 0xfffc0000, 0x4, 0xf335, 0x8, 0x9fd, 0x5, 0x7, 0x10001, 0x10001, 0x3, 0x4, 0x9a8, 0xe68, 0x9, 0xfffffffb, 0x80, 0x7fffffff, 0x4, 0x646, 0x80, 0x6, 0x5, 0x9, 0x10000, 0x3, 0x7, 0x3, 0x7, 0x2, 0x5, 0x9, 0xb77, 0xa85d, 0x5, 0x8, 0x8, 0x0, 0xff, 0x2b2, 0xff, 0x5, 0x7, 0x942, 0x40, 0x4, 0xcb, 0xa5e8, 0x4, 0x5c, 0x8, 0x80000001, 0x401, 0x3f, 0x2, 0x4, 0x8, 0x1f, 0x8, 0x8, 0x1ff, 0x401, 0x3, 0x52, 0x6, 0xfffffffe, 0x100, 0x8000, 0x3, 0x7, 0x5, 0x4, 0xb6, 0x3ff, 0x3f, 0x8, 0x9, 0x5, 0x9, 0x1ff, 0x9454, 0x2, 0x8, 0x4, 0x80000000, 0x5f59, 0x3ff, 0x0, 0x7fff, 0x0, 0x8, 0x800, 0x2, 0x4, 0x800, 0x2, 0x6, 0xe9f1, 0x4, 0xffff, 0x5, 0xfffffffc, 0x3ff, 0x86, 0x2, 0x1, 0x2, 0x10000, 0x3, 0x63c, 0x8, 0x800, 0x10000, 0x6, 0x2, 0x200, 0x4, 0x200, 0x300, 0x200, 0x4, 0x20, 0x5, 0x2, 0x7ff, 0x990, 0x1, 0x5, 0x3, 0x1, 0x1, 0xde36, 0x29b, 0x9, 0x1, 0x1, 0x0, 0x7, 0xd959, 0x8, 0x5, 0x9, 0x8, 0x1, 0x80, 0x20, 0x929, 0x0, 0x6, 0x4, 0x20, 0x10000, 0x7f, 0x6, 0xfffffffc, 0x101, 0x3, 0x3, 0x4, 0x5, 0x7, 0x8, 0x8, 0xfff, 0x5, 0x100, 0xffffffff, 0x3, 0x1, 0x2, 0x7ff, 0x4, 0x74, 0xff, 0x4, 0x80, 0xfffffff9, 0x6, 0x8, 0x9, 0x2, 0xfffffff9, 0x80000000, 0x9, 0x2, 0x6, 0x7, 0x6, 0x9, 0xff, 0x3, 0x3, 0x0, 0x40, 0x7, 0x3, 0x0, 0x400, 0x5, 0x281, 0x6, 0x101, 0x8, 0x9, 0x9, 0x1, 0x7f, 0xfffffffa, 0xbb9, 0x5, 0x0, 0x8001, 0x7, 0x3, 0x9, 0x4, 0x2a, 0x10001, 0x0, 0xb09, 0x8, 0x80, 0x9, 0x4, 0x1, 0x80000001, 0x7f, 0x8, 0x3, 0x1ff, 0x2, 0x9, 0x6, 0x20, 0x5, 0x7, 0x9, 0x5, 0x312, 0xccb4, 0x4, 0x2, 0x400, 0x8, 0x1, 0xfffffffe, 0x6e, 0x1, 0x8001, 0xba7, 0x0, 0x91, 0x8001, 0x789e, 0x3, 0x9, 0x7f, 0xd39, 0x7, 0xff, 0xbf3, 0x6, 0x81, 0x79, 0xfffffff7, 0x1ff, 0x885b, 0xa7f, 0xd0, 0x80000001, 0x7, 0x1, 0x9, 0x7, 0x4, 0x2, 0x2, 0x1, 0x1, 0xffff, 0xe97, 0x0, 0x3ff, 0xa00000, 0x2, 0x200, 0x0, 0x3, 0xb4a, 0x101, 0x69, 0x80, 0xf292, 0x8, 0x4, 0x1, 0x5, 0x9, 0x3, 0x749, 0x10000, 0xffff, 0x7f, 0x80000001, 0xc4, 0x80000000, 0x8, 0x0, 0x266c, 0x6, 0x72, 0x6, 0x7, 0x1, 0x8f, 0x3000, 0x3, 0x8, 0x80000000, 0x8, 0x36e, 0x1, 0x3, 0x1f, 0x1ff, 0xffffffc0, 0x14, 0x6, 0x9, 0x4, 0x1000, 0x100, 0xffffffb2, 0xf, 0x7, 0x2, 0xec1, 0x4, 0x3, 0x3, 0x5, 0x5e788a42, 0x10001, 0xff, 0x7fffffff, 0x6, 0x6, 0xfffffffd, 0x5, 0x0, 0x2, 0x8a6, 0x2800, 0x1, 0x373, 0x9, 0x7, 0x10000, 0x40, 0x6, 0x3, 0x10000, 0x81, 0x7, 0xbc4f, 0x4, 0x9, 0x80, 0x100, 0x5, 0xffffffff, 0x80, 0x2, 0x4, 0x0, 0x3, 0x6, 0x3ff, 0x1000, 0x1ff, 0x6, 0x712badf7, 0x5, 0x4, 0x9, 0x4, 0x9, 0xe75a, 0x3, 0xa8, 0x3f2f, 0xffffffff, 0xa41, 0x8, 0x7, 0x7ff, 0x9, 0x2, 0x9, 0x7fb, 0x100, 0x320, 0x49f, 0xffffff81, 0x1, 0x200, 0x3, 0x5, 0x3, 0x80, 0x80000000, 0x1e3b, 0x3f, 0x0, 0x1, 0x1, 0x43c7a438, 0x3, 0xfffffff9, 0x9, 0x8, 0x2, 0x7, 0xfffffffb, 0x0, 0x1ff, 0x3, 0x3, 0xc37, 0x8, 0x200, 0xaef2, 0xfffffffd, 0x2, 0x6, 0xffffffff, 0x80, 0x4, 0x2, 0x20, 0x401, 0x1756, 0x7, 0x9, 0x9, 0x5, 0x7360cfb1, 0x8, 0x2, 0x1ff, 0x3ff, 0xfff, 0x5, 0x22, 0x100, 0x7ff, 0x1f, 0x20, 0xf78, 0x2, 0x1, 0x1, 0x3ff, 0x401, 0xb0, 0x40, 0x4, 0x3c1, 0x8, 0x9, 0x20, 0xc6, 0x100, 0x1, 0x8001, 0x4, 0x0, 0x8, 0x0, 0x3, 0x5, 0x1ff, 0x6, 0x2, 0x882, 0x5, 0x80000001, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5, 0x1, 0x4, 0x6, 0x0, 0xfff, 0x10001, 0xfffff485, 0x7ff, 0x1ff, 0x0, 0x6, 0x5c0, 0x237c612e, 0x4, 0x1, 0x20, 0x8, 0x7fff, 0xd9e, 0x101, 0x5, 0x40, 0x7, 0x39dd, 0x71e4, 0x6, 0x2, 0xff, 0x3ff, 0x3, 0x9, 0x0, 0x4, 0x52, 0x0, 0xffff, 0x80000001, 0x7, 0x3, 0x1, 0x6, 0x6, 0x7, 0x3, 0xffff, 0x4, 0x3, 0xfff, 0x1, 0x20, 0x6, 0x4, 0x7c, 0x4, 0x400, 0x8001, 0x7d0, 0x9, 0x1, 0x8, 0x9, 0x2, 0xfa5, 0x8, 0x81, 0x80000000, 0x1ff, 0x5, 0x2, 0x1ff, 0x101, 0x5, 0x3, 0x40, 0x0, 0x80, 0xfffffbff, 0x1, 0x8, 0x8, 0x1, 0x36, 0x8000, 0x100, 0x100, 0x0, 0x200, 0x1, 0x6df9, 0x6, 0x1, 0x90b, 0x7, 0x8d4, 0x7, 0x1, 0x8, 0x2, 0xd20c, 0x9, 0xfffffdd2, 0x401, 0xe4e, 0x40, 0x3ff, 0x7, 0x401, 0x7, 0xfffff000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, 0x1, 0xae, 0x7, 0x6, 0x2, 0x3, 0x40, 0x2, 0x3, 0x200, 0x80, 0x4, 0x3ff, 0x5, 0xffffffff, 0x71b, 0x8001, 0xffff, 0x0, 0xbc3c, 0x20, 0x4, 0x0, 0x0, 0x8, 0x9, 0x66, 0x7d, 0x8, 0x6, 0x1, 0x6, 0x3, 0x20, 0x5, 0x5, 0x8001, 0x4, 0x1ff, 0x0, 0x0, 0x80000001, 0x200, 0x2, 0x4, 0x6, 0x2, 0x3, 0x7, 0x4, 0x616f, 0xe, 0x5, 0x0, 0xb824, 0x5, 0x2148, 0x8, 0x800, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x9, 0x8000, 0x4f6, 0xf48a, 0x0, 0x3, 0xff, 0xf6b, 0xfffffff7, 0x9, 0x2, 0xe9dd, 0x40, 0x2be, 0x101, 0x4, 0x5, 0x2, 0x966b, 0x2, 0x1, 0xf0, 0x5, 0x9, 0x401, 0x9, 0x101, 0x400, 0xfff, 0x20, 0x1ff, 0x3ff, 0x1, 0x1, 0x43, 0x5, 0x200, 0x7, 0xc2b, 0x7ff, 0x4, 0xffff7fff, 0x0, 0x7, 0xffff8f15, 0x3, 0xe8, 0x7ff, 0x9, 0x0, 0x8, 0x2, 0x9a8, 0x3, 0x1, 0x10001, 0x4, 0x1ff, 0xfff, 0x6, 0x0, 0x7, 0x3, 0x7fffffff, 0x0, 0x7, 0x7ff, 0x1400, 0xff, 0x8, 0x64, 0x0, 0x10000, 0xf317, 0x4, 0x1, 0x7, 0xffffffff, 0x3, 0x0, 0x1, 0x3, 0x8, 0x51, 0x9, 0x3610, 0x5, 0x10001, 0x4, 0xfffffffc, 0x8, 0x255, 0x8001, 0x7f, 0xe2a9, 0x17d5, 0x1, 0x7ff, 0x6, 0x30a, 0x5, 0x7f, 0xf9, 0x2, 0xd55, 0xfba, 0x20, 0x3, 0x57, 0x9e, 0xad1c26e, 0x70, 0x7, 0x1, 0x2, 0x3ff, 0x9, 0x2, 0x4, 0x0, 0x100, 0x7f, 0x8000, 0x2, 0x10000, 0x2, 0x6, 0x9, 0x4, 0x6, 0x101, 0x1, 0xfffffffd, 0x7fff, 0x1000, 0xdde, 0x401, 0xffffc71c, 0x10000, 0x7, 0x7fffffff, 0x62a6, 0x80, 0x84d4, 0x32e, 0x6, 0x1000, 0xffffffff, 0x100, 0x9, 0xae, 0xf8, 0x20, 0x80, 0x3, 0x6, 0x9, 0x6, 0x3, 0xa6, 0x0, 0x2, 0x0, 0xa843, 0x3, 0x2, 0x10001, 0x4, 0x5, 0x7, 0xffffffff, 0x3ff, 0x80000000, 0x1, 0x80000000, 0x2, 0x101, 0x4, 0x80000000, 0x9, 0x80000000, 0x3, 0x1f, 0x3, 0x7fffffff, 0x5, 0xdb, 0x4, 0x6, 0x6, 0x6, 0x7f, 0x6, 0x6, 0xdf, 0x80000000, 0x7, 0x8, 0x0, 0x100, 0xc8, 0x1, 0x5, 0x8, 0x4, 0x0, 0x6000, 0x2, 0x7, 0x7, 0x7f, 0xfb8, 0x3f, 0x0, 0x0, 0x8, 0x0, 0x9, 0x4, 0x7, 0x4, 0x66, 0x3, 0x8, 0xbd, 0x40, 0x7f, 0x4, 0x0, 0x5, 0x200, 0x3f, 0xffffffff, 0x100, 0x1, 0x7fffffff, 0x40, 0x7, 0x1f, 0x7, 0x1, 0x5, 0xbd3, 0x7, 0x0, 0x9024620, 0x9, 0x66c, 0x80000000, 0x8000, 0x80000001, 0x3, 0x43, 0x0, 0x1, 0x7, 0x0, 0xa4, 0x8, 0x401, 0x2, 0x63a7efad, 0x3ff, 0x5, 0xffffffff, 0x3, 0x6, 0x20, 0x8000, 0x6, 0x65a9ba58, 0xfffffffb, 0x8001, 0xadc9, 0x10001, 0x1, 0x8, 0x4, 0x3ff, 0x8]}) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed, 0x5}, 0x4d) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:46:59 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 561.151589][ T29] audit: type=1804 audit(1593024419.269:88): pid=20533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/337/file0/bus" dev="sda1" ino=16367 res=1 18:46:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 561.404210][ T29] audit: type=1804 audit(1593024419.520:89): pid=20548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/338/file0/bus" dev="sda1" ino=15867 res=1 18:46:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:46:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000040)={{0x2, 0xffffffff, 0x1d1, 0xfd2, 0x9, 0x7b3}, 0x7, [0x7, 0x8, 0xbbf, 0x6e7, 0x4, 0x101, 0x1, 0x9d2, 0x7, 0x14000, 0x9, 0x1, 0x7, 0x1, 0x9, 0x9, 0x0, 0x3, 0x0, 0x7, 0x800, 0x6, 0x1, 0x6, 0x9c, 0x8, 0x612, 0x400, 0x3f, 0x9, 0x5, 0x80000001, 0x2, 0x4c, 0xfffffffd, 0x5, 0x8, 0x4fc3, 0x9, 0x5b, 0x3, 0x1, 0x6, 0x3, 0x9, 0x1, 0x9, 0x5, 0x8001, 0x1f, 0x6, 0xf94, 0x0, 0x5292, 0x401, 0x4, 0x517ad694, 0x8, 0x8, 0x2, 0x200, 0x9, 0x800, 0x3, 0x3, 0x7, 0xf117, 0x1a800da5, 0x9, 0x8001, 0x1fffe, 0x3, 0xfffc0000, 0x4, 0xf335, 0x8, 0x9fd, 0x5, 0x7, 0x10001, 0x10001, 0x3, 0x4, 0x9a8, 0xe68, 0x9, 0xfffffffb, 0x80, 0x7fffffff, 0x4, 0x646, 0x80, 0x6, 0x5, 0x9, 0x10000, 0x3, 0x7, 0x3, 0x7, 0x2, 0x5, 0x9, 0xb77, 0xa85d, 0x5, 0x8, 0x8, 0x0, 0xff, 0x2b2, 0xff, 0x5, 0x7, 0x942, 0x40, 0x4, 0xcb, 0xa5e8, 0x4, 0x5c, 0x8, 0x80000001, 0x401, 0x3f, 0x2, 0x4, 0x8, 0x1f, 0x8, 0x8, 0x1ff, 0x401, 0x3, 0x52, 0x6, 0xfffffffe, 0x100, 0x8000, 0x3, 0x7, 0x5, 0x4, 0xb6, 0x3ff, 0x3f, 0x8, 0x9, 0x5, 0x9, 0x1ff, 0x9454, 0x2, 0x8, 0x4, 0x80000000, 0x5f59, 0x3ff, 0x0, 0x7fff, 0x0, 0x8, 0x800, 0x2, 0x4, 0x800, 0x2, 0x6, 0xe9f1, 0x4, 0xffff, 0x5, 0xfffffffc, 0x3ff, 0x86, 0x2, 0x1, 0x2, 0x10000, 0x3, 0x63c, 0x8, 0x800, 0x10000, 0x6, 0x2, 0x200, 0x4, 0x200, 0x300, 0x200, 0x4, 0x20, 0x5, 0x2, 0x7ff, 0x990, 0x1, 0x5, 0x3, 0x1, 0x1, 0xde36, 0x29b, 0x9, 0x1, 0x1, 0x0, 0x7, 0xd959, 0x8, 0x5, 0x9, 0x8, 0x1, 0x80, 0x20, 0x929, 0x0, 0x6, 0x4, 0x20, 0x10000, 0x7f, 0x6, 0xfffffffc, 0x101, 0x3, 0x3, 0x4, 0x5, 0x7, 0x8, 0x8, 0xfff, 0x5, 0x100, 0xffffffff, 0x3, 0x1, 0x2, 0x7ff, 0x4, 0x74, 0xff, 0x4, 0x80, 0xfffffff9, 0x6, 0x8, 0x9, 0x2, 0xfffffff9, 0x80000000, 0x9, 0x2, 0x6, 0x7, 0x6, 0x9, 0xff, 0x3, 0x3, 0x0, 0x40, 0x7, 0x3, 0x0, 0x400, 0x5, 0x281, 0x6, 0x101, 0x8, 0x9, 0x9, 0x1, 0x7f, 0xfffffffa, 0xbb9, 0x5, 0x0, 0x8001, 0x7, 0x3, 0x9, 0x4, 0x2a, 0x10001, 0x0, 0xb09, 0x8, 0x80, 0x9, 0x4, 0x1, 0x80000001, 0x7f, 0x8, 0x3, 0x1ff, 0x2, 0x9, 0x6, 0x20, 0x5, 0x7, 0x9, 0x5, 0x312, 0xccb4, 0x4, 0x2, 0x400, 0x8, 0x1, 0xfffffffe, 0x6e, 0x1, 0x8001, 0xba7, 0x0, 0x91, 0x8001, 0x789e, 0x3, 0x9, 0x7f, 0xd39, 0x7, 0xff, 0xbf3, 0x6, 0x81, 0x79, 0xfffffff7, 0x1ff, 0x885b, 0xa7f, 0xd0, 0x80000001, 0x7, 0x1, 0x9, 0x7, 0x4, 0x2, 0x2, 0x1, 0x1, 0xffff, 0xe97, 0x0, 0x3ff, 0xa00000, 0x2, 0x200, 0x0, 0x3, 0xb4a, 0x101, 0x69, 0x80, 0xf292, 0x8, 0x4, 0x1, 0x5, 0x9, 0x3, 0x749, 0x10000, 0xffff, 0x7f, 0x80000001, 0xc4, 0x80000000, 0x8, 0x0, 0x266c, 0x6, 0x72, 0x6, 0x7, 0x1, 0x8f, 0x3000, 0x3, 0x8, 0x80000000, 0x8, 0x36e, 0x1, 0x3, 0x1f, 0x1ff, 0xffffffc0, 0x14, 0x6, 0x9, 0x4, 0x1000, 0x100, 0xffffffb2, 0xf, 0x7, 0x2, 0xec1, 0x4, 0x3, 0x3, 0x5, 0x5e788a42, 0x10001, 0xff, 0x7fffffff, 0x6, 0x6, 0xfffffffd, 0x5, 0x0, 0x2, 0x8a6, 0x2800, 0x1, 0x373, 0x9, 0x7, 0x10000, 0x40, 0x6, 0x3, 0x10000, 0x81, 0x7, 0xbc4f, 0x4, 0x9, 0x80, 0x100, 0x5, 0xffffffff, 0x80, 0x2, 0x4, 0x0, 0x3, 0x6, 0x3ff, 0x1000, 0x1ff, 0x6, 0x712badf7, 0x5, 0x4, 0x9, 0x4, 0x9, 0xe75a, 0x3, 0xa8, 0x3f2f, 0xffffffff, 0xa41, 0x8, 0x7, 0x7ff, 0x9, 0x2, 0x9, 0x7fb, 0x100, 0x320, 0x49f, 0xffffff81, 0x1, 0x200, 0x3, 0x5, 0x3, 0x80, 0x80000000, 0x1e3b, 0x3f, 0x0, 0x1, 0x1, 0x43c7a438, 0x3, 0xfffffff9, 0x9, 0x8, 0x2, 0x7, 0xfffffffb, 0x0, 0x1ff, 0x3, 0x3, 0xc37, 0x8, 0x200, 0xaef2, 0xfffffffd, 0x2, 0x6, 0xffffffff, 0x80, 0x4, 0x2, 0x20, 0x401, 0x1756, 0x7, 0x9, 0x9, 0x5, 0x7360cfb1, 0x8, 0x2, 0x1ff, 0x3ff, 0xfff, 0x5, 0x22, 0x100, 0x7ff, 0x1f, 0x20, 0xf78, 0x2, 0x1, 0x1, 0x3ff, 0x401, 0xb0, 0x40, 0x4, 0x3c1, 0x8, 0x9, 0x20, 0xc6, 0x100, 0x1, 0x8001, 0x4, 0x0, 0x8, 0x0, 0x3, 0x5, 0x1ff, 0x6, 0x2, 0x882, 0x5, 0x80000001, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5, 0x1, 0x4, 0x6, 0x0, 0xfff, 0x10001, 0xfffff485, 0x7ff, 0x1ff, 0x0, 0x6, 0x5c0, 0x237c612e, 0x4, 0x1, 0x20, 0x8, 0x7fff, 0xd9e, 0x101, 0x5, 0x40, 0x7, 0x39dd, 0x71e4, 0x6, 0x2, 0xff, 0x3ff, 0x3, 0x9, 0x0, 0x4, 0x52, 0x0, 0xffff, 0x80000001, 0x7, 0x3, 0x1, 0x6, 0x6, 0x7, 0x3, 0xffff, 0x4, 0x3, 0xfff, 0x1, 0x20, 0x6, 0x4, 0x7c, 0x4, 0x400, 0x8001, 0x7d0, 0x9, 0x1, 0x8, 0x9, 0x2, 0xfa5, 0x8, 0x81, 0x80000000, 0x1ff, 0x5, 0x2, 0x1ff, 0x101, 0x5, 0x3, 0x40, 0x0, 0x80, 0xfffffbff, 0x1, 0x8, 0x8, 0x1, 0x36, 0x8000, 0x100, 0x100, 0x0, 0x200, 0x1, 0x6df9, 0x6, 0x1, 0x90b, 0x7, 0x8d4, 0x7, 0x1, 0x8, 0x2, 0xd20c, 0x9, 0xfffffdd2, 0x401, 0xe4e, 0x40, 0x3ff, 0x7, 0x401, 0x7, 0xfffff000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, 0x1, 0xae, 0x7, 0x6, 0x2, 0x3, 0x40, 0x2, 0x3, 0x200, 0x80, 0x4, 0x3ff, 0x5, 0xffffffff, 0x71b, 0x8001, 0xffff, 0x0, 0xbc3c, 0x20, 0x4, 0x0, 0x0, 0x8, 0x9, 0x66, 0x7d, 0x8, 0x6, 0x1, 0x6, 0x3, 0x20, 0x5, 0x5, 0x8001, 0x4, 0x1ff, 0x0, 0x0, 0x80000001, 0x200, 0x2, 0x4, 0x6, 0x2, 0x3, 0x7, 0x4, 0x616f, 0xe, 0x5, 0x0, 0xb824, 0x5, 0x2148, 0x8, 0x800, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x9, 0x8000, 0x4f6, 0xf48a, 0x0, 0x3, 0xff, 0xf6b, 0xfffffff7, 0x9, 0x2, 0xe9dd, 0x40, 0x2be, 0x101, 0x4, 0x5, 0x2, 0x966b, 0x2, 0x1, 0xf0, 0x5, 0x9, 0x401, 0x9, 0x101, 0x400, 0xfff, 0x20, 0x1ff, 0x3ff, 0x1, 0x1, 0x43, 0x5, 0x200, 0x7, 0xc2b, 0x7ff, 0x4, 0xffff7fff, 0x0, 0x7, 0xffff8f15, 0x3, 0xe8, 0x7ff, 0x9, 0x0, 0x8, 0x2, 0x9a8, 0x3, 0x1, 0x10001, 0x4, 0x1ff, 0xfff, 0x6, 0x0, 0x7, 0x3, 0x7fffffff, 0x0, 0x7, 0x7ff, 0x1400, 0xff, 0x8, 0x64, 0x0, 0x10000, 0xf317, 0x4, 0x1, 0x7, 0xffffffff, 0x3, 0x0, 0x1, 0x3, 0x8, 0x51, 0x9, 0x3610, 0x5, 0x10001, 0x4, 0xfffffffc, 0x8, 0x255, 0x8001, 0x7f, 0xe2a9, 0x17d5, 0x1, 0x7ff, 0x6, 0x30a, 0x5, 0x7f, 0xf9, 0x2, 0xd55, 0xfba, 0x20, 0x3, 0x57, 0x9e, 0xad1c26e, 0x70, 0x7, 0x1, 0x2, 0x3ff, 0x9, 0x2, 0x4, 0x0, 0x100, 0x7f, 0x8000, 0x2, 0x10000, 0x2, 0x6, 0x9, 0x4, 0x6, 0x101, 0x1, 0xfffffffd, 0x7fff, 0x1000, 0xdde, 0x401, 0xffffc71c, 0x10000, 0x7, 0x7fffffff, 0x62a6, 0x80, 0x84d4, 0x32e, 0x6, 0x1000, 0xffffffff, 0x100, 0x9, 0xae, 0xf8, 0x20, 0x80, 0x3, 0x6, 0x9, 0x6, 0x3, 0xa6, 0x0, 0x2, 0x0, 0xa843, 0x3, 0x2, 0x10001, 0x4, 0x5, 0x7, 0xffffffff, 0x3ff, 0x80000000, 0x1, 0x80000000, 0x2, 0x101, 0x4, 0x80000000, 0x9, 0x80000000, 0x3, 0x1f, 0x3, 0x7fffffff, 0x5, 0xdb, 0x4, 0x6, 0x6, 0x6, 0x7f, 0x6, 0x6, 0xdf, 0x80000000, 0x7, 0x8, 0x0, 0x100, 0xc8, 0x1, 0x5, 0x8, 0x4, 0x0, 0x6000, 0x2, 0x7, 0x7, 0x7f, 0xfb8, 0x3f, 0x0, 0x0, 0x8, 0x0, 0x9, 0x4, 0x7, 0x4, 0x66, 0x3, 0x8, 0xbd, 0x40, 0x7f, 0x4, 0x0, 0x5, 0x200, 0x3f, 0xffffffff, 0x100, 0x1, 0x7fffffff, 0x40, 0x7, 0x1f, 0x7, 0x1, 0x5, 0xbd3, 0x7, 0x0, 0x9024620, 0x9, 0x66c, 0x80000000, 0x8000, 0x80000001, 0x3, 0x43, 0x0, 0x1, 0x7, 0x0, 0xa4, 0x8, 0x401, 0x2, 0x63a7efad, 0x3ff, 0x5, 0xffffffff, 0x3, 0x6, 0x20, 0x8000, 0x6, 0x65a9ba58, 0xfffffffb, 0x8001, 0xadc9, 0x10001, 0x1, 0x8, 0x4, 0x3ff, 0x8]}) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:46:59 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:46:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:46:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:46:59 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:00 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 561.967825][ T29] audit: type=1804 audit(1593024420.090:90): pid=20567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/339/file0/bus" dev="sda1" ino=15736 res=1 18:47:00 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 562.030805][T20575] overlayfs: failed to resolve './file0/../file0': -2 18:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 562.078561][T20580] overlayfs: failed to resolve './file0/../file0': -2 18:47:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:00 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffff81]) 18:47:00 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x800, 0x9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sched_rr_get_interval(0x0, &(0x7f0000000140)) getsockopt$sock_timeval(r0, 0x1, 0x75ea9a492655b78d, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open(&(0x7f0000000000)='./file0\x00', 0x2300, 0x50) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xca002, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f7765726469af7a3917c410a2cc6f45f70fae24cd723d2e2f66696c65302c0a42e305f976005b7597bd496c6f7665726469723d2e2f00106c65302c75707065726469723d2e2f66"]) [ 562.301014][ T29] audit: type=1804 audit(1593024420.420:91): pid=20583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/340/file0/bus" dev="sda1" ino=16383 res=1 18:47:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 18:47:00 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 562.548138][ T29] audit: type=1804 audit(1593024420.670:92): pid=20607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/341/file0/bus" dev="sda1" ino=15739 res=1 18:47:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="857e00000000000000000f000000f8f4bbcee62a7ecef35a898d8d9479c8b65c125622353547558eb81749fd1d3df40f688c12693e00d6b03a76ccf9d6fd0a0e95cfeb3d4cda72d7ab417c99b68fd0fcdafc6fc0eb2160"], 0x14}}, 0x0) 18:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 18:47:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:00 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726569723d2e2f66696c65302f2e2e2f667da0696c6530"]) 18:47:00 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 18:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 562.797105][T20628] overlayfs: unrecognized mount option "uppereir=./file0/../f} ile0" or missing value 18:47:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)) 18:47:00 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 562.833560][ T29] audit: type=1804 audit(1593024420.950:93): pid=20623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/342/file0/bus" dev="sda1" ino=15739 res=1 [ 562.869459][T20630] overlayfs: unrecognized mount option "uppereir=./file0/../f} ile0" or missing value 18:47:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 563.043351][ T29] audit: type=1804 audit(1593024421.160:94): pid=20637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/343/file0/bus" dev="sda1" ino=15834 res=1 18:47:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)) 18:47:01 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:01 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 563.274221][T20655] overlayfs: workdir and upperdir must be separate subtrees 18:47:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 563.304661][ T29] audit: type=1804 audit(1593024421.420:95): pid=20656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/344/file0/bus" dev="sda1" ino=16375 res=1 18:47:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)) 18:47:01 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 563.380087][T20664] overlayfs: workdir and upperdir must be separate subtrees 18:47:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x1c}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r8}, 0xc) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0xc) ioctl$LOOP_SET_FD(r3, 0x4c00, r9) fsetxattr$security_evm(r6, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000280)=@v2={0x3, 0x1, 0x0, 0x4bc0f917, 0xc8, "4c0c6e743c44478ddc6d7cd97db6b01dca38310121edf1cba57f1d9ab65c6cdff14838d7bf46d36e2d2b9bd880978b692434d4fdc8130f1c96ff1b7ae067d453a65416c7f813daff18f5cba9e77e93b127e475de8afe8a898a43981fe8cb3426b16815553b6a2dc304722e56d1cf0091f596b67e6fcbb5fc309214507cd329aa4a7105673eced5e80665911d69438279dccb9191df9b09b3d198e2bde287d97b1b0ff88e89c11409f96ef83852a9b96abf12a464ceb909cec047c5b0edb2b8e4a12262d108898535"}, 0xd1, 0x2) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4b27b3fecbc993771e06bf519f4", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f00000008000500d415c4683000038014000600fe8000000000000000000000000000bb080001000200000008000500ac14141b06000400186f00005800038014000600fe8000000000000000000000000000bb14000600fe80000000000000000000000000000a14000600fe8000000000000000000000000000aa060007004e200000080001000000000008000100010000000800040000800007"], 0xac}}, 0x0) 18:47:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:01 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x43) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) 18:47:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x282, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)) 18:47:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:01 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:01 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 563.710262][T20682] overlayfs: failed to resolve '.a¯ã¬^–Ѭ/filP0/..K °Hã§áü•¥CæÀwú-ïÇ;'И*ç8]œS úk”Ý»†€#µöáUéÉÜ•M›õG;þŽþú¾ÿ±È®KR¹r®.É%gWÖ«6ImòPÛ’¯¾) ƒö5?M þZmªcS-1¢Ýé€cj‰ƒlGÂöÔ(P2¼"9˜Q/ž}6ÑJHÿ ïÀˆ‘è˜Ñöñ¥²ç†MÆYò°=°ý¼[9^Åq@á§V¾ºÞ¤w@ýê;b¡‰±ák&xZŽVÖŸ†Šñ:ìZ‘P†SÚïøF¸·Y!ŽŽÌFÚ@‡Í;ö aÝzñÒ': -2 18:47:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0000c0}, 0x1) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r5, &(0x7f0000000240), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:47:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 563.785952][T20686] overlayfs: failed to resolve '.a¯ã¬^–Ѭ/filP0/..K °Hã§áü•¥CæÀwú-ïÇ;'И*ç8]œS úk”Ý»†€#µöáUéÉÜ•M›õG;þŽþú¾ÿ±È®KR¹r®.É%gWÖ«6ImòPÛ’¯¾) ƒö5?M þZmªcS-1¢Ýé€cj‰ƒlGÂöÔ(P2¼"9˜Q/ž}6ÑJHÿ ïÀˆ‘è˜Ñöñ¥²ç†MÆYò°=°ý¼[9^Åq@á§V¾ºÞ¤w@ýê;b¡‰±ák&xZŽVÖŸ†Šñ:ìZ‘P†SÚïøF¸·Y!ŽŽÌFÚ@‡Í;ö aÝzñÒ': -2 18:47:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:02 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 563.934102][T20694] smc: net device hsr0 applied user defined pnetid SYZ2 [ 564.061126][T20702] overlayfs: workdir and upperdir must be separate subtrees 18:47:02 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:02 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:02 executing program 3: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:02 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x30) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./file0,Bowerdir=.Afile0,upperd\t\x00\x00\x00\x00\x00\x00\x00e0/../file0,\x00']) 18:47:02 executing program 3: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 564.503955][T20720] overlayfs: unrecognized mount option "Bowerdir=.Afile0" or missing value 18:47:02 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 564.588065][T20723] overlayfs: unrecognized mount option "Bowerdir=.Afile0" or missing value 18:47:02 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:02 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:02 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x115) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x43) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00168d59faffffffab9a6cbbb205736cac1b78509e22280019957c523ada8c88046dfb12a6cf4f48e60b0ae01378e4363a8b8bacb12a97f2472a8a0414f06aca4dad17d828261762e7d4ced6312d5d0ccdebb23bb285d296727e9160bb1b4f3bf53150a8a78891b5584d19904e7deef8163875922871f7fccbc2151b23ea154541245411479eec6ca583dcee39bc4fe4dfe29421a35e302faa1c9ddbc0c8ea234aa1bbec28c9ecc2ca13b17ce57091398f316398d3db5eecb00400"]) setuid(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=@report={0xa0, 0x20, 0x200, 0x70bd27, 0x25dfdbfe, {0x3c, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@mcast1, 0x4e21, 0x0, 0x4e21, 0xfffe, 0x2, 0x80, 0x0, 0x73}}, [@tfcpad={0x8, 0x16, 0x1}, @XFRMA_IF_ID={0x8}, @lifetime_val={0x24, 0x9, {0xcc01, 0x400, 0xafba, 0x6}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd27, 0xffffffff}}, @extra_flags={0x8, 0x18, 0xe00000}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x851}, 0x4) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x1913, r2, 0xf000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000140)={0x3, 0x200, 0x91, &(0x7f00000002c0)="7b2a7249ff77b327d4d3a873b380311d816f8445cc711c761a2218118eb58bd428c5073e6d6a5415f3c10969941683de0ebd5a86fe617edd5f432b5469f4fb32cb6a91e06d3b1d2bf212091864cc746fb81518e37d58c86e7472e8124693dfa67f53e5f6f3768d5af76e937dcc6c6a2e6f9323a6e91042564b0f1bdadefb227fd598ad290803547990fab0204b9820bbfd"}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) syz_open_pts(r3, 0x202080) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) 18:47:02 executing program 3: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:03 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:03 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:03 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 564.980833][T20743] overlayfs: workdir and upperdir must be separate subtrees 18:47:03 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:03 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:03 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 18:47:03 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:03 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:03 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 565.278182][T20759] overlayfs: workdir and upperdir must be separate subtrees 18:47:03 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:03 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 565.324198][T20764] overlayfs: workdir and upperdir must be separate subtrees 18:47:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 565.408103][T20767] overlayfs: workdir and upperdir must be separate subtrees 18:47:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:03 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2a0000, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x9, 0xffff, 0xcfe4, 0xffff, 0x10, "13d0e5e5702f8d3d"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 565.523380][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 565.523395][ T29] audit: type=1804 audit(1593024423.640:101): pid=20769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/350/file0/bus" dev="sda1" ino=15867 res=1 [ 565.594681][T20776] overlayfs: workdir and upperdir must be separate subtrees 18:47:03 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:03 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:47:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 565.724024][T20783] overlayfs: workdir and upperdir must be separate subtrees [ 565.789850][T20787] overlayfs: workdir and upperdir must be separate subtrees 18:47:04 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 565.874879][ T29] audit: type=1804 audit(1593024423.990:102): pid=20789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/351/file0/bus" dev="sda1" ino=15902 res=1 18:47:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:04 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchmodat(r1, &(0x7f0000000000)='./file1\x00', 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:04 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) 18:47:04 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 566.124382][T20804] overlayfs: workdir and upperdir must be separate subtrees 18:47:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 566.159772][ T29] audit: type=1804 audit(1593024424.280:103): pid=20802 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/352/file0/bus" dev="sda1" ino=15899 res=1 18:47:04 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:04 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 566.221644][T20811] overlayfs: workdir and upperdir must be separate subtrees 18:47:04 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lstat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @remote}]}) 18:47:04 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:04 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) [ 566.463463][T20824] overlayfs: workdir and upperdir must be separate subtrees [ 566.477930][ T29] audit: type=1804 audit(1593024424.600:104): pid=20818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/353/file0/bus" dev="sda1" ino=15890 res=1 18:47:04 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 566.522003][T20824] overlayfs: workdir and upperdir must be separate subtrees 18:47:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:04 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x190, @time={0x9}, 0x8, {0x4, 0x3}, 0xff, 0x2}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./file0/../file0\x00', 0x41) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000000c0)={0x0, {0x9, 0x9}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:04 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) 18:47:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 566.782472][ T29] audit: type=1804 audit(1593024424.900:105): pid=20837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/354/file0/bus" dev="sda1" ino=15880 res=1 18:47:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:05 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 18:47:05 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:05 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r3, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffff) 18:47:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 567.096876][T20855] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 567.103671][T20857] overlayfs: workdir and upperdir must be separate subtrees [ 567.187906][ T29] audit: type=1804 audit(1593024425.310:106): pid=20855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/355/file0/bus" dev="sda1" ino=15859 res=1 18:47:05 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r2, 0x100000000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) 18:47:05 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x1, "fd335123ffece6af5711684123dba603ead6fead76e0fed99d2411c6b9295d69", 0x30314752}) 18:47:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:05 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 567.376310][T20875] overlayfs: workdir and upperdir must be separate subtrees [ 567.408283][T20878] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 18:47:05 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:47:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:05 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r2, 0x100000000) [ 567.507812][ T29] audit: type=1804 audit(1593024425.630:107): pid=20878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/356/file0/bus" dev="sda1" ino=15741 res=1 18:47:05 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:05 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x20010, r2, 0x100000000) [ 567.721197][T20894] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 18:47:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 567.845256][ T29] audit: type=1804 audit(1593024425.960:108): pid=20894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/357/file0/bus" dev="sda1" ino=15741 res=1 18:47:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:06 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) 18:47:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:06 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:06 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:47:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 568.208246][ T29] audit: type=1804 audit(1593024426.330:109): pid=20915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/358/bus" dev="sda1" ino=15757 res=1 18:47:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:06 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:06 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) 18:47:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4$tipc(r1, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) [ 568.589151][ T29] audit: type=1804 audit(1593024426.710:110): pid=20929 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/359/bus" dev="sda1" ino=15880 res=1 18:47:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:06 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:06 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) 18:47:06 executing program 4: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0x3, 0x9, 0x3}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e22, @local}}, [0x40, 0x7ff, 0xd9, 0x0, 0x8, 0xe51, 0x8, 0x1000, 0x5, 0x9, 0xdd, 0x6, 0x0, 0x7f, 0x8]}, &(0x7f0000000100)=0x100) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x194, @mcast1, 0xec}}, 0xff, 0x800, 0x1000, 0x5, 0xc}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r9, 0x5}, &(0x7f0000000480)=0x8) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f77ef209fce723d2e2f66696c65302c75707065796469723d2e2f66696c65702fe5ee9faf100bdd3aca06"]) 18:47:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 568.891601][T20942] overlayfs: unrecognized mount option "lowï ŸÎr=./file0" or missing value 18:47:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:07 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14a56180eee15517b1b0af2eb718068377bde222b2f6845d3231b2c7e77d79d08800e4b7c96224bd7a1c5f00547ad32b6d4e46a350aaa5ef69e62a206064895d67306176f8", @ANYRES16=r1, @ANYBLOB="855079b2234a3a01a0c555907e00"], 0x14}}, 0x0) rt_sigaction(0x1d, &(0x7f0000000300)={&(0x7f00000000c0)="dbe08e6bf8c4e1785d9000100002dcbbf9ffffff0ff7d7c4827dbe7000477b9b66470f6e939f000000c421eddc266736f2400f2a17", 0x80000006, &(0x7f00000001c0)="c4c221389a39000000f0294b64f246dbf1c4827d335576c422b9967310660f7d0bf340aef04381704114fff177c481816202c4e3157dfd65", {[0x7ff]}}, 0x0, 0x8, &(0x7f0000000340)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8801) 18:47:07 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./file}{lowerdir=./file0,upperdir=./file0/../file0,\x00']) 18:47:07 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:07 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x10, 0x0) 18:47:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 569.324541][T20964] overlayfs: missing 'lowerdir' 18:47:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, &(0x7f00000010c0), 0x0) [ 569.384332][T20973] overlayfs: missing 'lowerdir' 18:47:07 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:07 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:07 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x3044450, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}, {@nfs_export_off='nfs_export=off'}]}) 18:47:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, 0x0, 0x64223e343cb77e85, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}]}, 0x40}}, 0x0) 18:47:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:07 executing program 0: openat$mice(0xffffffffffffff9c, 0x0, 0x4000) 18:47:07 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x400, 0x8, 0x9, 0xae8d, 0xa, "d8fff3721cc312cb"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='wnrkdir=./file0,lowerdir=./file0,upperdir=./file0/../file0,\x00', @ANYBLOB="898f6bc05a8a20e8a9be594581ed260c906fd82457eff212cb149a46ac34a990e5181e128e3e6d8bb7805ee9bb2f7dad019a55a173e34550fe39256f19057dea75340e43a90e69fbfcea7335b722f5bf21233674db0e68a462a28613b88bce05b3e96908e0fd039b16fe56dc56c2f46f280588980bc0090899f2a3a8bcdccb138d72c4e93379ef2679ed565cfe98f54510be550357211718614a28d57f55cae7314ce6d7ebb08216c9f3524abd81efd24e929c81513df1a3d0756c5f7ffd0514fcc7353bb3f90e06447abd1bb87a7db435707926bb513e714fb49825b1ca99007ad03dd6c03dcc3db665c9eb88a4a8ded4efcdd0900072e557949cfeb63fc7acbe55e6f2200ae5ec551c7e68025456fd59e2643e7ef7f5f5c96357b1632aa76f2aae79852cb5de9b285c5e1e29499827c29dfe69b9140b21526a98eb35c46e9a2a", @ANYRES16, @ANYRESOCT=0x0]) 18:47:07 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:08 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:08 executing program 0: openat$mice(0xffffffffffffff9c, 0x0, 0x4000) 18:47:08 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0000c0}, 0x1) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r5, &(0x7f0000000240), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 570.180279][T21020] smc: net device hsr0 applied user defined pnetid SYZ2 18:47:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00060009080000000f0000007b20676f2b5d61b426f5b0973a2a07000000c8572ea6322cba99a29ecbefd9a22988be"], 0x14}}, 0x0) 18:47:08 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:08 executing program 0: openat$mice(0xffffffffffffff9c, 0x0, 0x4000) 18:47:08 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 570.382868][T21030] overlayfs: missing 'workdir' 18:47:08 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) [ 570.412638][T21030] overlayfs: missing 'workdir' 18:47:08 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 570.536929][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 570.536942][ T29] audit: type=1804 audit(1593024428.650:116): pid=21038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/365/file0/bus" dev="loop2" ino=2 res=1 18:47:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:08 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:08 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) [ 570.696442][T21046] overlayfs: workdir and upperdir must be separate subtrees [ 570.727001][T21049] overlayfs: workdir and upperdir must be separate subtrees [ 570.833674][ T29] audit: type=1804 audit(1593024428.950:117): pid=21050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/366/file0/bus" dev="loop2" ino=2 res=1 18:47:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0000c0}, 0x1) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$eventfd(r5, &(0x7f0000000240), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 18:47:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:09 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="776f726b64781481bb69723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c00"]) 18:47:09 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:09 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) 18:47:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r8, 0xc7b}, 0x8) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0}]) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000040)={r4, 0x7f, 0x2d1, "2a1351fddf92fc603b410326fa8e265e6b3169a072d5556dd77455fb416c6ca14cfeb4a23a14ac0dc3877f59182caf81c908d557"}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:47:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 571.253379][T21071] overlayfs: unrecognized mount option "workdx»ir=./file0" or missing value [ 571.278619][ T29] audit: type=1804 audit(1593024429.400:118): pid=21072 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/367/bus" dev="sda1" ino=15926 res=1 18:47:09 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:09 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 571.362889][T21076] overlayfs: unrecognized mount option "workdx»ir=./file0" or missing value 18:47:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:09 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 571.487023][ T29] audit: type=1804 audit(1593024429.611:119): pid=21082 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/368/bus" dev="sda1" ino=15916 res=1 18:47:09 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f945d1477de7de568aa28ea9e412b67da66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f"]) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 571.554405][T21085] overlayfs: missing 'workdir' [ 571.657524][T21090] overlayfs: failed to resolve './”]wÞ}åhª(êžA+gÚfile0': -2 [ 571.701546][T21092] overlayfs: failed to resolve './”]wÞ}åhª(êžA+gÚfile0': -2 [ 571.759109][ T29] audit: type=1804 audit(1593024429.881:120): pid=21093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/369/bus" dev="sda1" ino=15884 res=1 18:47:10 executing program 1 (fault-call:0 fault-nth:0): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x80, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x100000000011, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) 18:47:10 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@nfs_export_on='nfs_export=on'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:10 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 572.004453][T21104] overlayfs: missing 'workdir' [ 572.019693][T21107] FAULT_INJECTION: forcing a failure. [ 572.019693][T21107] name failslab, interval 1, probability 0, space 0, times 0 [ 572.192947][T21107] CPU: 0 PID: 21107 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 572.203074][T21107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.213814][T21107] Call Trace: [ 572.217427][T21107] dump_stack+0x18f/0x20d [ 572.221879][T21107] should_fail.cold+0x5/0x14 [ 572.226480][T21107] should_failslab+0x5/0xf [ 572.230897][T21107] kmem_cache_alloc+0x29b/0x740 [ 572.235752][T21107] ? ksys_write+0x212/0x250 [ 572.240270][T21107] getname_flags+0xd2/0x5b0 [ 572.244875][T21107] do_sys_openat2+0x3fc/0x7a0 [ 572.250698][T21107] ? file_open_root+0x400/0x400 [ 572.256966][T21107] ? __mutex_unlock_slowpath+0xe2/0x660 [ 572.262913][T21107] ? wait_for_completion+0x270/0x270 [ 572.269326][T21107] ? __sb_end_write+0xf8/0x1d0 [ 572.274080][T21107] do_sys_open+0xc3/0x140 [ 572.278406][T21107] ? filp_open+0x70/0x70 [ 572.282661][T21107] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 572.288519][T21107] ? do_syscall_64+0x1c/0xe0 [ 572.293478][T21107] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 572.300340][T21107] do_syscall_64+0x60/0xe0 [ 572.304774][T21107] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 572.310686][T21107] RIP: 0033:0x45ca59 [ 572.314587][T21107] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 572.334341][T21107] RSP: 002b:00007f7554434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.343639][T21107] RAX: ffffffffffffffda RBX: 00000000004f8700 RCX: 000000000045ca59 [ 572.352066][T21107] RDX: 0000000000004000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 572.360046][T21107] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 572.368113][T21107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 572.376094][T21107] R13: 00000000000007ce R14: 00000000004caaae R15: 00007f75544356d4 18:47:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:47:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:10 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r2}}}], 0x20, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}], 0x20}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010009000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000800", @ANYRES32=0x0, @ANYBLOB="020004008f8bfdffc76b2adc94ce3b35b583e920d033c0660000000000000027832fba2b4918542ed51bacc2ffffff7f00000000a28d835e0121d356a10ab71ea1357e16b37c166d71b8c8e842453bb9d260d3acdc1bc3f45288effee51fd3d71c0ab800000000000000", @ANYRES32=0x0, @ANYBLOB="02008750", @ANYRES32=0x0, @ANYBLOB="040001000000000008", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="10000100000000002000050000000000"], 0x54, 0x0) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [{0x2, 0x3}], {0x4, 0x4}, [{0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2, r6}, {0x8, 0x5, r7}, {0x8, 0x4, r8}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup2(0xffffffffffffffff, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:10 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:10 executing program 0 (fault-call:5 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 572.581612][T21124] FAULT_INJECTION: forcing a failure. [ 572.581612][T21124] name failslab, interval 1, probability 0, space 0, times 0 [ 572.586622][T21122] overlayfs: workdir and upperdir must be separate subtrees 18:47:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 572.624812][T21124] CPU: 0 PID: 21124 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 572.637273][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.648558][T21124] Call Trace: [ 572.652166][T21124] dump_stack+0x18f/0x20d [ 572.656514][T21124] should_fail.cold+0x5/0x14 [ 572.661392][T21124] ? sock_free_inode+0x20/0x20 [ 572.666859][T21124] should_failslab+0x5/0xf [ 572.671734][T21124] kmem_cache_alloc+0x29b/0x740 [ 572.676863][T21124] ? find_held_lock+0x2d/0x110 [ 572.682257][T21124] ? sock_free_inode+0x20/0x20 [ 572.687123][T21124] sock_alloc_inode+0x18/0x1c0 [ 572.691889][T21124] ? sock_free_inode+0x20/0x20 [ 572.697793][T21124] alloc_inode+0x61/0x1e0 [ 572.702240][T21124] new_inode_pseudo+0x14/0xe0 [ 572.706247][T21129] overlayfs: workdir and upperdir must be separate subtrees [ 572.706923][T21124] sock_alloc+0x3c/0x260 [ 572.706943][T21124] __sys_accept4_file+0x152/0x5b0 [ 572.706969][T21124] ? __ia32_sys_listen+0x70/0x70 [ 572.731233][T21124] ? rcu_read_lock_held_common+0xa0/0xa0 [ 572.736979][T21124] ? check_preemption_disabled+0x38/0x220 [ 572.742714][T21124] ? __fget_files+0x299/0x400 [ 572.747420][T21124] __sys_accept4+0xb0/0x100 [ 572.751940][T21124] __x64_sys_accept4+0x93/0xf0 [ 572.756711][T21124] do_syscall_64+0x60/0xe0 [ 572.761136][T21124] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 572.767026][T21124] RIP: 0033:0x45ca59 18:47:10 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xfffffe7d}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200290}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd0, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1656bdb5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20000045) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 572.770946][T21124] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 572.790909][T21124] RSP: 002b:00007f73c2004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 572.800028][T21124] RAX: ffffffffffffffda RBX: 00000000004d9980 RCX: 000000000045ca59 [ 572.808735][T21124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 18:47:11 executing program 1 (fault-call:0 fault-nth:1): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:11 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 572.817663][T21124] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 572.826685][T21124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 572.835034][T21124] R13: 0000000000000018 R14: 00000000004c2dba R15: 00007f73c20056d4 18:47:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:11 executing program 0 (fault-call:5 fault-nth:1): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 572.986387][T21134] overlayfs: workdir and upperdir must be separate subtrees [ 573.041568][T21143] FAULT_INJECTION: forcing a failure. [ 573.041568][T21143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 573.047379][T21145] FAULT_INJECTION: forcing a failure. [ 573.047379][T21145] name failslab, interval 1, probability 0, space 0, times 0 [ 573.054802][T21143] CPU: 1 PID: 21143 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 573.054811][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.054818][T21143] Call Trace: [ 573.054845][T21143] dump_stack+0x18f/0x20d [ 573.054867][T21143] should_fail.cold+0x5/0x14 [ 573.054987][T21143] __alloc_pages_nodemask+0x17a/0x810 [ 573.055008][T21143] ? __alloc_pages_slowpath.constprop.0+0x25e0/0x25e0 [ 573.112099][T21143] ? find_held_lock+0x2d/0x110 [ 573.118348][T21143] ? lock_downgrade+0x840/0x840 [ 573.123195][T21143] cache_grow_begin+0x8c/0xc10 [ 573.127946][T21143] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 573.133477][T21143] kmem_cache_alloc+0x670/0x740 [ 573.138340][T21143] ? ksys_write+0x212/0x250 [ 573.142901][T21143] getname_flags+0xd2/0x5b0 [ 573.147479][T21143] do_sys_openat2+0x3fc/0x7a0 [ 573.152163][T21143] ? file_open_root+0x400/0x400 [ 573.157191][T21143] ? __mutex_unlock_slowpath+0xe2/0x660 [ 573.164492][T21143] ? wait_for_completion+0x270/0x270 [ 573.170245][T21143] ? __sb_end_write+0xf8/0x1d0 [ 573.175537][T21143] do_sys_open+0xc3/0x140 [ 573.180119][T21143] ? filp_open+0x70/0x70 [ 573.184435][T21143] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 573.189986][T21143] ? do_syscall_64+0x1c/0xe0 [ 573.194674][T21143] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 573.201091][T21143] do_syscall_64+0x60/0xe0 [ 573.206390][T21143] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 573.213090][T21143] RIP: 0033:0x45ca59 [ 573.217088][T21143] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 573.238461][T21143] RSP: 002b:00007f7554434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.247131][T21143] RAX: ffffffffffffffda RBX: 00000000004f8700 RCX: 000000000045ca59 [ 573.255840][T21143] RDX: 0000000000004000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 573.263809][T21143] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 573.271852][T21143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 573.280071][T21143] R13: 00000000000007ce R14: 00000000004caaae R15: 00007f75544356d4 18:47:11 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f7a696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c0084db3914453426f269be4f22f559cc5cc65a37c811eedd01a501d52afe243c2ed098cc23d1b540155db399b0d926f6415cc9f1a48fb5f5b154"]) [ 573.288050][T21145] CPU: 0 PID: 21145 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 573.298563][T21145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.310026][T21145] Call Trace: [ 573.313331][T21145] dump_stack+0x18f/0x20d [ 573.317674][T21145] should_fail.cold+0x5/0x14 [ 573.324278][T21145] should_failslab+0x5/0xf [ 573.329011][T21145] kmem_cache_alloc+0x29b/0x740 [ 573.333881][T21145] ? find_held_lock+0x2d/0x110 [ 573.338908][T21145] __d_alloc+0x2a/0x920 [ 573.343078][T21145] d_alloc_pseudo+0x19/0x70 [ 573.347695][T21145] alloc_file_pseudo+0xc6/0x250 [ 573.352733][T21145] ? alloc_file+0x590/0x590 [ 573.357242][T21145] ? do_raw_spin_unlock+0x171/0x260 [ 573.363667][T21145] ? _raw_spin_unlock+0x24/0x40 [ 573.368877][T21145] ? __alloc_fd+0x463/0x600 [ 573.373390][T21145] sock_alloc_file+0x4f/0x190 [ 573.378082][T21145] __sys_accept4_file+0x2c4/0x5b0 [ 573.383119][T21145] ? __ia32_sys_listen+0x70/0x70 [ 573.388063][T21145] ? rcu_read_lock_held_common+0xa0/0xa0 [ 573.394054][T21145] ? check_preemption_disabled+0x38/0x220 [ 573.399785][T21145] ? __fget_files+0x299/0x400 [ 573.404483][T21145] __sys_accept4+0xb0/0x100 [ 573.408993][T21145] __x64_sys_accept4+0x93/0xf0 [ 573.413791][T21145] do_syscall_64+0x60/0xe0 [ 573.418270][T21145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 573.424164][T21145] RIP: 0033:0x45ca59 [ 573.428152][T21145] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 573.448118][T21145] RSP: 002b:00007f73c2004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 573.456648][T21145] RAX: ffffffffffffffda RBX: 00000000004d9980 RCX: 000000000045ca59 [ 573.465252][T21145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 573.473315][T21145] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 573.482902][T21145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 573.491166][T21145] R13: 0000000000000018 R14: 00000000004c2dba R15: 00007f73c20056d4 [ 573.614372][T21150] overlayfs: workdir and upperdir must be separate subtrees [ 573.653710][T21152] overlayfs: workdir and upperdir must be separate subtrees 18:47:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffaec315132174b4e0a06b857e00"], 0x14}}, 0x0) 18:47:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:12 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:12 executing program 1 (fault-call:0 fault-nth:2): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:12 executing program 0 (fault-call:5 fault-nth:2): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:12 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key(0x0, 0x0, &(0x7f00000000c0)='r', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r3) keyctl$search(0xa, 0x0, 0x0, 0x0, r3) r4 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='overlay\x00', r3) keyctl$revoke(0x3, r4) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c00419828b3d46dbeabcc8bcea72e9ee48d5f46116fba7993e672c4e03586fbf4d5497f568ae499fe917465c60569b086d4588893da3b54db481e67cef198"]) [ 573.912969][T21165] FAULT_INJECTION: forcing a failure. [ 573.912969][T21165] name failslab, interval 1, probability 0, space 0, times 0 [ 573.929835][T21165] CPU: 0 PID: 21165 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 573.938458][T21166] FAULT_INJECTION: forcing a failure. [ 573.938458][T21166] name failslab, interval 1, probability 0, space 0, times 0 [ 573.940187][T21165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.940193][T21165] Call Trace: [ 573.940218][T21165] dump_stack+0x18f/0x20d [ 573.940239][T21165] should_fail.cold+0x5/0x14 [ 573.940259][T21165] should_failslab+0x5/0xf [ 573.940281][T21165] kmem_cache_alloc+0x29b/0x740 [ 573.990716][T21165] ? mark_lock+0x11f/0xdd0 [ 573.996426][T21165] ? print_usage_bug+0x240/0x240 [ 574.003778][T21165] ? stack_trace_consume_entry+0x160/0x160 [ 574.009613][T21165] __alloc_file+0x21/0x350 [ 574.014030][T21165] alloc_empty_file+0x6d/0x170 [ 574.019429][T21165] path_openat+0xe3/0x27d0 [ 574.024230][T21165] ? path_lookupat.isra.0+0x530/0x530 [ 574.030363][T21165] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 574.037724][T21165] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 574.045092][T21165] ? lock_acquire+0x1f2/0x8f0 [ 574.049877][T21165] do_filp_open+0x192/0x260 [ 574.056147][T21165] ? may_open_dev+0xf0/0xf0 [ 574.063913][T21165] ? __alloc_fd+0x463/0x600 [ 574.068440][T21165] ? do_raw_spin_lock+0x120/0x2d0 [ 574.074178][T21165] ? _raw_spin_unlock+0x24/0x40 [ 574.079047][T21165] ? __alloc_fd+0x463/0x600 [ 574.084641][T21165] do_sys_openat2+0x585/0x7a0 [ 574.089966][T21165] ? file_open_root+0x400/0x400 [ 574.095117][T21165] ? __mutex_unlock_slowpath+0xe2/0x660 [ 574.102089][T21165] ? wait_for_completion+0x270/0x270 [ 574.109330][T21165] ? __sb_end_write+0xf8/0x1d0 [ 574.118540][T21165] do_sys_open+0xc3/0x140 [ 574.123170][T21165] ? filp_open+0x70/0x70 [ 574.127542][T21165] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 574.133711][T21165] ? do_syscall_64+0x1c/0xe0 [ 574.138398][T21165] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 574.144648][T21165] do_syscall_64+0x60/0xe0 [ 574.149077][T21165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.155957][T21165] RIP: 0033:0x45ca59 [ 574.159963][T21165] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.183158][T21165] RSP: 002b:00007f7554434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.195964][T21165] RAX: ffffffffffffffda RBX: 00000000004f8700 RCX: 000000000045ca59 [ 574.206122][T21165] RDX: 0000000000004000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 574.216845][T21165] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 574.225508][T21165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 574.234621][T21165] R13: 00000000000007ce R14: 00000000004caaae R15: 00007f75544356d4 [ 574.246099][ T29] audit: type=1804 audit(1593024432.181:121): pid=21167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/373/file0/bus" dev="sda1" ino=16065 res=1 [ 574.250891][T21166] CPU: 1 PID: 21166 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 574.285921][T21166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.296943][T21166] Call Trace: [ 574.300294][T21166] dump_stack+0x18f/0x20d [ 574.304907][T21166] should_fail.cold+0x5/0x14 [ 574.310126][T21166] should_failslab+0x5/0xf [ 574.314574][T21166] kmem_cache_alloc+0x29b/0x740 [ 574.319436][T21166] ? lock_downgrade+0x840/0x840 [ 574.324293][T21166] __alloc_file+0x21/0x350 [ 574.329830][T21166] alloc_empty_file+0x6d/0x170 [ 574.334866][T21166] alloc_file+0x5e/0x590 [ 574.339242][T21166] alloc_file_pseudo+0x165/0x250 [ 574.344359][T21166] ? alloc_file+0x590/0x590 [ 574.350466][T21166] ? do_raw_spin_unlock+0x171/0x260 [ 574.356978][T21166] ? _raw_spin_unlock+0x24/0x40 [ 574.361949][T21166] ? __alloc_fd+0x463/0x600 [ 574.366568][T21166] sock_alloc_file+0x4f/0x190 [ 574.372312][T21166] __sys_accept4_file+0x2c4/0x5b0 [ 574.377885][T21166] ? __ia32_sys_listen+0x70/0x70 [ 574.384273][T21166] ? rcu_read_lock_held_common+0xa0/0xa0 [ 574.390251][T21166] ? check_preemption_disabled+0x38/0x220 [ 574.396426][T21166] ? __fget_files+0x299/0x400 [ 574.401618][T21166] __sys_accept4+0xb0/0x100 [ 574.406392][T21166] __x64_sys_accept4+0x93/0xf0 [ 574.412107][T21166] do_syscall_64+0x60/0xe0 [ 574.416961][T21166] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.422844][T21166] RIP: 0033:0x45ca59 [ 574.426724][T21166] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.446746][T21166] RSP: 002b:00007f73c2004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 574.455141][T21166] RAX: ffffffffffffffda RBX: 00000000004d9980 RCX: 000000000045ca59 18:47:12 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 574.463200][T21166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 574.471352][T21166] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 574.479588][T21166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 574.487548][T21166] R13: 0000000000000018 R14: 00000000004c2dba R15: 00007f73c20056d4 [ 574.508810][T21164] overlayfs: workdir and upperdir must be separate subtrees 18:47:12 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='worklir=./file0,lowerdir=./file0,upperdir=./file0/../file0,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) r5 = socket$inet6(0xa, 0x80000, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r6) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0xff31}]) poll(&(0x7f0000000000)=[{r3, 0x1003}, {r5, 0x1}, {r6, 0x2402}, {r2, 0x418}], 0x4, 0xcb) 18:47:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:12 executing program 1 (fault-call:0 fault-nth:3): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:12 executing program 0 (fault-call:5 fault-nth:3): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 574.653902][T21181] overlayfs: unrecognized mount option "worklir=./file0" or missing value [ 574.738988][ T29] audit: type=1804 audit(1593024432.861:122): pid=21186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/374/file0/bus" dev="loop2" ino=2 res=1 [ 574.788115][T21193] FAULT_INJECTION: forcing a failure. [ 574.788115][T21193] name failslab, interval 1, probability 0, space 0, times 0 [ 574.814034][T21195] FAULT_INJECTION: forcing a failure. [ 574.814034][T21195] name failslab, interval 1, probability 0, space 0, times 0 [ 574.837769][T21193] CPU: 0 PID: 21193 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 574.847685][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.857746][T21193] Call Trace: [ 574.859080][T21185] overlayfs: unrecognized mount option "worklir=./file0" or missing value [ 574.861050][T21193] dump_stack+0x18f/0x20d [ 574.873852][T21193] should_fail.cold+0x5/0x14 [ 574.878456][T21193] should_failslab+0x5/0xf [ 574.882880][T21193] kmem_cache_alloc+0x29b/0x740 [ 574.887759][T21193] ? kmem_cache_alloc+0x358/0x740 [ 574.892799][T21193] security_file_alloc+0x34/0x160 [ 574.897827][T21193] __alloc_file+0xd8/0x350 [ 574.902250][T21193] alloc_empty_file+0x6d/0x170 [ 574.907029][T21193] alloc_file+0x5e/0x590 [ 574.911276][T21193] alloc_file_pseudo+0x165/0x250 [ 574.916228][T21193] ? alloc_file+0x590/0x590 [ 574.920925][T21193] ? do_raw_spin_unlock+0x171/0x260 [ 574.926130][T21193] ? _raw_spin_unlock+0x24/0x40 [ 574.930983][T21193] ? __alloc_fd+0x463/0x600 [ 574.935583][T21193] sock_alloc_file+0x4f/0x190 [ 574.940443][T21193] __sys_accept4_file+0x2c4/0x5b0 [ 574.945474][T21193] ? __ia32_sys_listen+0x70/0x70 [ 574.950440][T21193] ? rcu_read_lock_held_common+0xa0/0xa0 [ 574.956077][T21193] ? check_preemption_disabled+0x38/0x220 [ 574.961808][T21193] ? __fget_files+0x299/0x400 [ 574.966501][T21193] __sys_accept4+0xb0/0x100 [ 574.971011][T21193] __x64_sys_accept4+0x93/0xf0 [ 574.975786][T21193] do_syscall_64+0x60/0xe0 [ 574.980217][T21193] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.986112][T21193] RIP: 0033:0x45ca59 [ 574.990006][T21193] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.009619][T21193] RSP: 002b:00007f73c2004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 575.018390][T21193] RAX: ffffffffffffffda RBX: 00000000004d9980 RCX: 000000000045ca59 [ 575.026677][T21193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 575.034753][T21193] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 575.043626][T21193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 575.051629][T21193] R13: 0000000000000018 R14: 00000000004c2dba R15: 00007f73c20056d4 [ 575.069842][T21195] CPU: 1 PID: 21195 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 575.079782][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.090318][T21195] Call Trace: [ 575.093631][T21195] dump_stack+0x18f/0x20d [ 575.098065][T21195] should_fail.cold+0x5/0x14 [ 575.102677][T21195] should_failslab+0x5/0xf [ 575.107186][T21195] kmem_cache_alloc+0x29b/0x740 [ 575.112166][T21195] ? kmem_cache_alloc+0x358/0x740 [ 575.117206][T21195] security_file_alloc+0x34/0x160 [ 575.122268][T21195] __alloc_file+0xd8/0x350 [ 575.126721][T21195] alloc_empty_file+0x6d/0x170 [ 575.131518][T21195] path_openat+0xe3/0x27d0 [ 575.135954][T21195] ? path_lookupat.isra.0+0x530/0x530 [ 575.141347][T21195] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 575.147339][T21195] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 575.153340][T21195] ? lock_acquire+0x1f2/0x8f0 [ 575.158743][T21195] do_filp_open+0x192/0x260 [ 575.163282][T21195] ? may_open_dev+0xf0/0xf0 [ 575.167789][T21195] ? __alloc_fd+0x463/0x600 [ 575.172386][T21195] ? do_raw_spin_lock+0x120/0x2d0 [ 575.177521][T21195] ? _raw_spin_unlock+0x24/0x40 [ 575.182381][T21195] ? __alloc_fd+0x463/0x600 [ 575.186918][T21195] do_sys_openat2+0x585/0x7a0 [ 575.191738][T21195] ? file_open_root+0x400/0x400 [ 575.196600][T21195] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.202249][T21195] ? wait_for_completion+0x270/0x270 [ 575.207572][T21195] ? __sb_end_write+0xf8/0x1d0 [ 575.212352][T21195] do_sys_open+0xc3/0x140 [ 575.216698][T21195] ? filp_open+0x70/0x70 [ 575.220980][T21195] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.226541][T21195] ? do_syscall_64+0x1c/0xe0 [ 575.231168][T21195] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 575.237201][T21195] do_syscall_64+0x60/0xe0 [ 575.241640][T21195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 575.247917][T21195] RIP: 0033:0x45ca59 [ 575.252059][T21195] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.272233][T21195] RSP: 002b:00007f7554434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.280687][T21195] RAX: ffffffffffffffda RBX: 00000000004f8700 RCX: 000000000045ca59 [ 575.289510][T21195] RDX: 0000000000004000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 575.297490][T21195] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 575.305473][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 575.313503][T21195] R13: 00000000000007ce R14: 00000000004caaae R15: 00007f75544356d4 18:47:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup(r2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x7, @pix={0x7ff, 0x7fff, 0x31324d4e, 0x4, 0x200, 0xffffffff, 0x3, 0x3, 0x0, 0x1, 0x2, 0x5}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14ff0000", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001680)='/proc/capi/capi20\x00', 0x610001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000007c1ddda4161f3000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r9}]}, 0x24}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000001980)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001700)=@deltclass={0x20c, 0x29, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9, 0x190ff5bede63cb94}, {0x4, 0x5}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2c, 0x7c}}, @tclass_kind_options=@c_tbf={0x8, 0x1, 'tbf\x00'}, @tclass_kind_options=@c_cbs={0x8, 0x1, 'cbs\x00'}, @TCA_RATE={0x6, 0x5, {0x40, 0x81}}, @tclass_kind_options=@c_clsact={0xb, 0x1, 'clsact\x00'}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x2, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x4, 0x8001}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x0, 0x74}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x74, 0x1d6, 0xffff0001}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x3, 0x50b3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x6, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x800, 0x3f}}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x34, 0x2, [@TCA_ATM_HDR={0x30, 0x3, "0ece4b7d9c3bafc9e065a118a417d7488608e0ab8fb4439cccfd37c8266291aa74004c436556f069a4a00636"}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0xe0, 0x2, [@TCA_ATM_HDR={0x23, 0x3, "4cb5e0ca1296b2c5b832166bb016de1b6d57d3b4a04e37664ea1ffb63d2ce6"}, @TCA_ATM_HDR={0x23, 0x3, "5e0b65046d2998582036859b595d4a1ca6b9afdac887a7c3f1e3fbbc915bde"}, @TCA_ATM_HDR={0x3f, 0x3, "3eaf9870c642c450469e2d6c26edc3b7dca3bba184bd9829f5d9aa50409300cb2fe6f1de9f6bbdf7b6e59344c952859dfea5980544c4a7cbf90ef2"}, @TCA_ATM_HDR={0x43, 0x3, "c642271075e90522f8afbcfe32e83bfd28106b50225d7b04e1f151a2ebc6fc25162200edfd04494b9614bd3e430bff6042995159a545db99a7b5c7c530d382"}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_FD={0x8, 0x1, r4}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) 18:47:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:13 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:13 executing program 4: mkdir(&(0x7f0000000000)='./file0/../file0\x00', 0xb4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776ff76b6469723d2e2f66696cea307600007765726469723d2e2f63e93ddf96c2d2537eda696c65302c75707065726469723d212f66696c65302f2e2e2f66696c65302c00"]) 18:47:13 executing program 0 (fault-call:5 fault-nth:4): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:13 executing program 1 (fault-call:0 fault-nth:4): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 575.607529][T21221] FAULT_INJECTION: forcing a failure. [ 575.607529][T21221] name failslab, interval 1, probability 0, space 0, times 0 18:47:13 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, 0x0, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 575.647299][ T29] audit: type=1804 audit(1593024433.771:123): pid=21220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/375/file0/bus" dev="loop2" ino=2 res=1 [ 575.678760][T21221] CPU: 1 PID: 21221 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 575.688875][T21221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.699116][T21221] Call Trace: [ 575.702419][T21221] dump_stack+0x18f/0x20d [ 575.706769][T21221] should_fail.cold+0x5/0x14 [ 575.711405][T21221] should_failslab+0x5/0xf [ 575.715896][T21221] __kmalloc+0x2d9/0x7a0 [ 575.720253][T21221] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 575.726248][T21221] ? tomoyo_realpath_from_path+0xc2/0x620 [ 575.732363][T21221] ? mark_lock+0x11f/0xdd0 [ 575.737261][T21221] ? lock_release+0x800/0x800 [ 575.742062][T21221] ? print_usage_bug+0x240/0x240 [ 575.747711][T21221] tomoyo_realpath_from_path+0xc2/0x620 [ 575.753466][T21221] tomoyo_check_open_permission+0x26d/0x370 [ 575.760564][T21221] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 575.767215][T21221] ? unlazy_child+0x470/0x470 [ 575.773252][T21221] ? lock_downgrade+0x840/0x840 [ 575.778142][T21221] ? do_raw_spin_lock+0x120/0x2d0 [ 575.783414][T21221] tomoyo_file_open+0xa3/0xd0 [ 575.788192][T21221] security_file_open+0x6e/0x3d0 [ 575.793624][T21221] do_dentry_open+0x355/0x11a0 [ 575.798711][T21221] path_openat+0x1e9e/0x27d0 [ 575.803932][T21221] ? path_lookupat.isra.0+0x530/0x530 [ 575.811071][T21221] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 575.817152][T21221] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 575.823584][T21221] ? lock_acquire+0x1f2/0x8f0 [ 575.829151][T21221] do_filp_open+0x192/0x260 [ 575.833885][T21221] ? may_open_dev+0xf0/0xf0 [ 575.839275][T21221] ? do_raw_spin_lock+0x120/0x2d0 [ 575.844947][T21221] ? _raw_spin_unlock+0x24/0x40 [ 575.851689][T21221] ? __alloc_fd+0x463/0x600 [ 575.856650][T21221] do_sys_openat2+0x585/0x7a0 [ 575.862012][T21221] ? file_open_root+0x400/0x400 [ 575.867277][T21221] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.873211][T21221] ? wait_for_completion+0x270/0x270 [ 575.878515][T21221] ? __sb_end_write+0xf8/0x1d0 [ 575.883324][T21221] do_sys_open+0xc3/0x140 [ 575.888231][T21221] ? filp_open+0x70/0x70 [ 575.892956][T21221] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.898694][T21221] ? do_syscall_64+0x1c/0xe0 [ 575.903946][T21221] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 575.910547][T21221] do_syscall_64+0x60/0xe0 [ 575.915879][T21221] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 575.921979][T21221] RIP: 0033:0x45ca59 [ 575.926061][T21221] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.945875][T21221] RSP: 002b:00007f7554434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 18:47:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:14 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r2, 0x8000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 575.954387][T21221] RAX: ffffffffffffffda RBX: 00000000004f8700 RCX: 000000000045ca59 [ 575.962458][T21221] RDX: 0000000000004000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 575.970447][T21221] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 575.979105][T21221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 575.987530][T21221] R13: 00000000000007ce R14: 00000000004caaae R15: 00007f75544356d4 18:47:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 576.098559][T21221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.145767][T21231] overlayfs: workdir and upperdir must be separate subtrees 18:47:14 executing program 1 (fault-call:0 fault-nth:5): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) [ 576.224062][T21240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 576.235527][ T29] audit: type=1804 audit(1593024434.341:124): pid=21235 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/376/file0/bus" dev="loop2" ino=2 res=1 [ 576.351466][T21248] FAULT_INJECTION: forcing a failure. [ 576.351466][T21248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.364704][T21248] CPU: 0 PID: 21248 Comm: syz-executor.1 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 576.374677][T21248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.385825][T21248] Call Trace: [ 576.389152][T21248] dump_stack+0x18f/0x20d [ 576.393512][T21248] should_fail.cold+0x5/0x14 [ 576.398381][T21248] __alloc_pages_nodemask+0x17a/0x810 [ 576.403856][T21248] ? __alloc_pages_slowpath.constprop.0+0x25e0/0x25e0 [ 576.410635][T21248] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 576.416621][T21248] ? __kernel_text_address+0x9/0x30 [ 576.421961][T21248] ? unwind_get_return_address+0x5a/0xa0 [ 576.427610][T21248] cache_grow_begin+0x8c/0xc10 [ 576.432382][T21248] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 576.437851][T21248] __kmalloc+0x6dc/0x7a0 [ 576.442111][T21248] ? tomoyo_realpath_from_path+0xc2/0x620 [ 576.447865][T21248] ? print_usage_bug+0x240/0x240 [ 576.452823][T21248] tomoyo_realpath_from_path+0xc2/0x620 [ 576.458476][T21248] tomoyo_check_open_permission+0x26d/0x370 [ 576.465083][T21248] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 576.470858][T21248] ? unlazy_child+0x470/0x470 [ 576.475841][T21248] ? lock_downgrade+0x840/0x840 [ 576.480957][T21248] ? do_raw_spin_lock+0x120/0x2d0 [ 576.486083][T21248] tomoyo_file_open+0xa3/0xd0 [ 576.491118][T21248] security_file_open+0x6e/0x3d0 [ 576.496153][T21248] do_dentry_open+0x355/0x11a0 [ 576.500937][T21248] path_openat+0x1e9e/0x27d0 [ 576.505551][T21248] ? path_lookupat.isra.0+0x530/0x530 [ 576.511201][T21248] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 576.517225][T21248] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 576.523213][T21248] ? lock_acquire+0x1f2/0x8f0 [ 576.528090][T21248] do_filp_open+0x192/0x260 [ 576.532606][T21248] ? may_open_dev+0xf0/0xf0 [ 576.537992][T21248] ? do_raw_spin_lock+0x120/0x2d0 [ 576.543329][T21248] ? _raw_spin_unlock+0x24/0x40 [ 576.548290][T21248] ? __alloc_fd+0x463/0x600 [ 576.552822][T21248] do_sys_openat2+0x585/0x7a0 [ 576.557692][T21248] ? file_open_root+0x400/0x400 [ 576.562831][T21248] ? __mutex_unlock_slowpath+0xe2/0x660 [ 576.568476][T21248] ? wait_for_completion+0x270/0x270 [ 576.573778][T21248] ? __sb_end_write+0xf8/0x1d0 [ 576.578558][T21248] do_sys_open+0xc3/0x140 [ 576.582898][T21248] ? filp_open+0x70/0x70 [ 576.587238][T21248] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 576.592801][T21248] ? do_syscall_64+0x1c/0xe0 [ 576.597436][T21248] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 576.603428][T21248] do_syscall_64+0x60/0xe0 [ 576.607887][T21248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.613788][T21248] RIP: 0033:0x45ca59 [ 576.617691][T21248] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.637945][T21248] RSP: 002b:00007f7554434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.646581][T21248] RAX: ffffffffffffffda RBX: 00000000004f8700 RCX: 000000000045ca59 [ 576.654677][T21248] RDX: 0000000000004000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 576.662653][T21248] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 576.670714][T21248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 576.678690][T21248] R13: 00000000000007ce R14: 00000000004caaae R15: 00007f75544356d4 18:47:14 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = add_key(0x0, 0x0, &(0x7f00000000c0)='r', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r2) keyctl$search(0xa, 0x0, 0x0, 0x0, r2) r3 = add_key(0x0, 0x0, &(0x7f00000000c0)='r', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r3) keyctl$search(0xa, 0x0, 0x0, 0x0, r3) keyctl$search(0xa, r2, &(0x7f0000000000)='.dead\x00', &(0x7f00000000c0)={'syz', 0x2}, r3) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = dup2(r4, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x4) 18:47:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:14 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, 0x0, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 576.790578][T21258] overlayfs: workdir and upperdir must be separate subtrees 18:47:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x7) 18:47:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ca}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="000428bd7000fedbdf250d000000500007800c000300070000000000000008000200186400000c00040001800000000000000c000300e16f0000000000000c000400d98100000000000008000200050000000c0004000800000000000000dc01068008000100400000000400020088000300cb8a0b6cbd4a945d55cda27953f6d533521ea541a7f53b995ec76f2bcc7f24b13a008598b1b68753ef34832a0094ea9e7628e50015dafdc0606d364a5961411226486c8f435606fdcd1e608562cb53817e6f7dfa109c945f1d252934b01c7933eee824557313f5788246a5a16f31fca441f40029b4c0cbb382e33de65992e79fa02e337c080001000104000090000300826e08cfbd8a263c23a5702e5dd471ae6fb0df2e51e96d843f56d0731eb0f54d330a142552b87e9ebcf8871172b244ee8c7081bc4c71fa027ce1d4a41825546fddab30eae3374af9758145484d6def16d825c2756bb183b310a00ebe63f13bc21ab6303fb791e2f687158a5ea1a225e447662501b4d5a53a3f59c62340372daeb44176dae2b0106e74c7b91b9e000300dc868295ce3f31e89501e7f352825184db3af9668be31549e78263d904d21ce27acf8abe15cabe92764ae96148b6a24b84e1a47c772a24e6d7d03ef2727eeca643f379c0bd419f1463360abf03f5ad994b2d2353e3c658f038f7764f68ce4e13a8e9668bd4cb84f9e514045ef3a6c5bb90b29426fdfad858794ec1123847893b153b30a21d1935e65a38e0b924cfb6ae8c075b8941eafa048384000008000100000000000400020074000480240007800800010000000000080004000000000008000400ff01000008000400040000000900010073797a31000000000900010073797a30000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a30000000000001048014000780080002005d00000008000100100000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00002400078008000200040000000800020020000000080001001e00000008000200ffffff7f1c0007800800010002000000080002000600000008000100030000001300010062726f6164636173742d6c696e6b00000c00078008000200030000001c0007800800030040000000080003000400000008000300000000004400078008000300ff000000080001001a0000000800040005000000080003003104000008000400f7ffffff080002000100000008000300001000000800040005000000480004800c00078008000200080000001c00078008000300e7000000080004000100010008000200060000001c000780080001001d0000000800030005000000080001000a00000004000480340004800900010073797a31000000000c00078008000200ffff00000900010073797a31000000000c0007800800020002000000600006804300040067636d28616573290000000000000000000000000000000000000000000000001b00000088242e6c60231b5ec66d6694bfa310f56da528918281ad5cda471f00080001000500000008000100400000000800010003000000"], 0x494}, 0x1, 0x0, 0x0, 0x40}, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r10, 0xc10c5541, &(0x7f00000007c0)={0x0, 0xff, 0x1}) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r9, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x4000004) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:47:15 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x0, 0x7, [{0x3ff, 0x3, 0x4, [], 0x1006}, {0x100, 0x0, 0xd30, [], 0x200}, {0x20, 0x8, 0xa54, [], 0x5}, {0x8, 0xff, 0x3, [], 0x2208}, {0x1, 0x3f, 0xabdc, [], 0x200}, {0x40, 0x4, 0x44, [], 0x5}, {0xfffffffffffffffc, 0x6, 0x1000000000000, [], 0x900}]}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x218, @tick=0x2, 0x7, {0x6}, 0x7f, 0x0, 0x20}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0x7ff, 0x3, 0x0, 'queue1\x00', 0x1f}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) syz_open_pts(r0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f76696c65302c6c6f7765c7ce3dada9f2a60b726469723d2e2f66696c65302c75707065726469723d2e2f66696c65302f2e2e"]) [ 576.944465][ T29] audit: type=1804 audit(1593024435.061:125): pid=21269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/377/file0/bus" dev="sda1" ino=15966 res=1 18:47:15 executing program 1 (fault-call:0 fault-nth:6): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:15 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, 0x0, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x700) 18:47:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 577.159726][T21276] overlayfs: unrecognized mount option "loweÇÎ=­©ò¦ rdir=./file0" or missing value 18:47:15 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x3f00) [ 577.244298][T21276] overlayfs: unrecognized mount option "loweÇÎ=­©ò¦ rdir=./file0" or missing value [ 577.319328][ T29] audit: type=1804 audit(1593024435.441:126): pid=21287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/378/file0/bus" dev="loop2" ino=2 res=1 [ 577.377437][T21297] smc: net device hsr0 applied user defined pnetid SYZ2 18:47:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 18:47:15 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x141000, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:15 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(0x0, 0x0, 0x0) 18:47:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x4000000) 18:47:15 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4002) 18:47:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x7000000) 18:47:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 577.618675][T21308] overlayfs: workdir and upperdir must be separate subtrees [ 577.643218][T21308] overlayfs: workdir and upperdir must be separate subtrees 18:47:15 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xfffffffffffffd89) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}], 0x20}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESHEX=r3, @ANYBLOB="02000800", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="02008750", @ANYRES32=0x0, @ANYBLOB="040001000000000008", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="1000010000000000200056f41d030500"], 0x54, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000140)=[{0xfffffffffffffffe, 0x0, 0x40}], 0x240c00, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@session={'session', 0x3d, 0x62}}, {@gid={'gid'}}, {@map_off='map=off'}], [{@fowner_eq={'fowner', 0x3d, r5}}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BLKBSZSET(r9, 0x40081271, &(0x7f0000000000)=0x4) r10 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000480)={[{@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit='audit'}]}) 18:47:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:15 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4003) 18:47:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x3f000000) 18:47:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:16 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(0x0, 0x0, 0x0) 18:47:16 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:16 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4004) 18:47:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0xfeffffff) 18:47:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0xa8a3b000) r7 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) getrandom(&(0x7f0000000280)=""/246, 0xf6, 0x2) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00e901ffff000000002314af843ced"], 0x14}}, 0x0) bind$rxrpc(r3, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @private2}}, 0x24) 18:47:16 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4005) 18:47:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:16 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(0x0, 0x0, 0x0) [ 578.391206][T21351] overlayfs: conflicting lowerdir path 18:47:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 18:47:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0xfffffffe) 18:47:16 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4006) [ 578.537354][T21354] overlayfs: conflicting lowerdir path 18:47:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 18:47:16 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4007) 18:47:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x1000000000000) 18:47:16 executing program 2 (fault-call:8 fault-nth:0): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:16 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x0, 0x1, @raw_data=[0x6, 0x4, 0x8, 0x5, 0x480000, 0x5, 0x2, 0x800, 0xf8000, 0x3fca, 0xc51, 0x200, 0x7fd, 0x3, 0x1, 0x9]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./bus\x00', 0x6, 0x3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c6530376c6f7765726469723d2e2fe6cc1b0d302c75707069723d2e2f66696c65302f2e2e2f66696c65302c04000000"]) r6 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000340)={0x70}, 0x1) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000200)) [ 578.925202][T21382] FAULT_INJECTION: forcing a failure. [ 578.925202][T21382] name failslab, interval 1, probability 0, space 0, times 0 [ 578.945897][T21385] overlayfs: unrecognized mount option "uppir=./file0/../file0" or missing value [ 579.029184][T21382] CPU: 0 PID: 21382 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 579.039109][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.049261][T21382] Call Trace: [ 579.052605][T21382] dump_stack+0x18f/0x20d [ 579.056939][T21382] should_fail.cold+0x5/0x14 [ 579.061522][T21382] should_failslab+0x5/0xf [ 579.065994][T21382] kmem_cache_alloc+0x29b/0x740 [ 579.072334][T21382] ? ksys_write+0x212/0x250 [ 579.077274][T21382] getname_flags+0xd2/0x5b0 [ 579.082055][T21382] do_sys_openat2+0x3fc/0x7a0 [ 579.089171][T21382] ? file_open_root+0x400/0x400 [ 579.094060][T21382] ? __mutex_unlock_slowpath+0xe2/0x660 [ 579.099755][T21382] ? wait_for_completion+0x270/0x270 [ 579.105046][T21382] ? __sb_end_write+0xf8/0x1d0 [ 579.109847][T21382] do_sys_open+0xc3/0x140 [ 579.114183][T21382] ? filp_open+0x70/0x70 [ 579.118435][T21382] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 579.124427][T21382] ? do_syscall_64+0x1c/0xe0 [ 579.129028][T21382] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 579.135054][T21382] do_syscall_64+0x60/0xe0 [ 579.139484][T21382] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.145759][T21382] RIP: 0033:0x45ca59 [ 579.149669][T21382] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.169453][T21382] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 579.178187][T21382] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 579.186259][T21382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 579.194267][T21382] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 579.202338][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 579.210320][T21382] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 18:47:17 executing program 2 (fault-call:8 fault-nth:1): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 18:47:17 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4008) 18:47:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x400000000000000) 18:47:17 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d3e2f66696c65302c75708065726469723d2e2f66696c65302f2e2e2f2c000000000000"]) 18:47:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4018800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, r8, 0x10, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x16c, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x16c}}, 0x4008084) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 18:47:17 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 579.435525][T21401] overlayfs: unrecognized mount option "up€erdir=./file0/../" or missing value 18:47:17 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xff00) 18:47:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x700000000000000) [ 579.532593][T21406] overlayfs: unrecognized mount option "up€erdir=./file0/../" or missing value [ 579.580457][T21405] FAULT_INJECTION: forcing a failure. [ 579.580457][T21405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.594429][T21405] CPU: 1 PID: 21405 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 579.604328][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.614480][T21405] Call Trace: [ 579.617789][T21405] dump_stack+0x18f/0x20d [ 579.622338][T21405] should_fail.cold+0x5/0x14 [ 579.627820][T21405] __alloc_pages_nodemask+0x17a/0x810 [ 579.633207][T21405] ? __alloc_pages_slowpath.constprop.0+0x25e0/0x25e0 [ 579.640167][T21405] ? find_held_lock+0x2d/0x110 [ 579.645133][T21405] ? lock_downgrade+0x840/0x840 [ 579.650004][T21405] cache_grow_begin+0x8c/0xc10 [ 579.654795][T21405] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 579.660460][T21405] kmem_cache_alloc+0x670/0x740 [ 579.665511][T21405] ? ksys_write+0x212/0x250 [ 579.670033][T21405] getname_flags+0xd2/0x5b0 [ 579.674550][T21405] do_sys_openat2+0x3fc/0x7a0 [ 579.679245][T21405] ? file_open_root+0x400/0x400 [ 579.684106][T21405] ? __mutex_unlock_slowpath+0xe2/0x660 [ 579.689887][T21405] ? wait_for_completion+0x270/0x270 [ 579.696400][T21405] ? __sb_end_write+0xf8/0x1d0 [ 579.701273][T21405] do_sys_open+0xc3/0x140 [ 579.705905][T21405] ? filp_open+0x70/0x70 [ 579.710887][T21405] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 579.716564][T21405] ? do_syscall_64+0x1c/0xe0 [ 579.721166][T21405] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 579.727183][T21405] do_syscall_64+0x60/0xe0 [ 579.731712][T21405] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.737613][T21405] RIP: 0033:0x45ca59 [ 579.741598][T21405] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.761533][T21405] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 579.770544][T21405] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 18:47:17 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) [ 579.779263][T21405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 579.787324][T21405] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 579.795304][T21405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 579.803260][T21405] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 579.903398][ T29] audit: type=1804 audit(1593024438.021:127): pid=21405 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/383/file0/bus" dev="loop2" ino=2 res=1 18:47:18 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4002, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x3f00000000000000) 18:47:18 executing program 2 (fault-call:8 fault-nth:2): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 579.965554][T21413] overlayfs: conflicting lowerdir path [ 579.977546][T21417] overlayfs: workdir and upperdir must be separate subtrees 18:47:18 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) syz_open_pts(r0, 0x981443) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0xffff, 0x9}) 18:47:18 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x109) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:18 executing program 3 (fault-call:5 fault-nth:0): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0xfeffffff00000000) [ 580.285408][T21427] FAULT_INJECTION: forcing a failure. [ 580.285408][T21427] name failslab, interval 1, probability 0, space 0, times 0 [ 580.334508][T21439] overlayfs: workdir and upperdir must be separate subtrees [ 580.352376][T21437] FAULT_INJECTION: forcing a failure. [ 580.352376][T21437] name failslab, interval 1, probability 0, space 0, times 0 [ 580.364619][T21427] CPU: 1 PID: 21427 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 580.376233][T21427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.386557][T21427] Call Trace: [ 580.389957][T21427] dump_stack+0x18f/0x20d [ 580.394312][T21427] should_fail.cold+0x5/0x14 [ 580.398952][T21427] should_failslab+0x5/0xf [ 580.403385][T21427] kmem_cache_alloc+0x29b/0x740 [ 580.408273][T21427] ? mark_lock+0x11f/0xdd0 [ 580.412709][T21427] ? print_usage_bug+0x240/0x240 [ 580.417708][T21427] ? stack_trace_consume_entry+0x160/0x160 [ 580.421616][T21447] overlayfs: workdir and upperdir must be separate subtrees [ 580.423545][T21427] __alloc_file+0x21/0x350 [ 580.423561][T21427] alloc_empty_file+0x6d/0x170 [ 580.423581][T21427] path_openat+0xe3/0x27d0 [ 580.446165][T21427] ? path_lookupat.isra.0+0x530/0x530 [ 580.451546][T21427] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 580.457538][T21427] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 580.463675][T21427] ? lock_acquire+0x1f2/0x8f0 [ 580.468393][T21427] do_filp_open+0x192/0x260 [ 580.472914][T21427] ? may_open_dev+0xf0/0xf0 [ 580.477517][T21427] ? __alloc_fd+0x463/0x600 [ 580.482047][T21427] ? do_raw_spin_lock+0x120/0x2d0 [ 580.487085][T21427] ? _raw_spin_unlock+0x24/0x40 [ 580.491963][T21427] ? __alloc_fd+0x463/0x600 [ 580.496580][T21427] do_sys_openat2+0x585/0x7a0 [ 580.501254][T21427] ? file_open_root+0x400/0x400 [ 580.506117][T21427] ? __mutex_unlock_slowpath+0xe2/0x660 [ 580.511689][T21427] ? wait_for_completion+0x270/0x270 [ 580.516999][T21427] ? __sb_end_write+0xf8/0x1d0 [ 580.521782][T21427] do_sys_open+0xc3/0x140 [ 580.526214][T21427] ? filp_open+0x70/0x70 [ 580.530492][T21427] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 580.537521][T21427] ? do_syscall_64+0x1c/0xe0 [ 580.542119][T21427] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 580.548105][T21427] do_syscall_64+0x60/0xe0 [ 580.552534][T21427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.558855][T21427] RIP: 0033:0x45ca59 [ 580.562750][T21427] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.582458][T21427] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 580.591156][T21427] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 580.599144][T21427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 580.607106][T21427] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.615155][T21427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 580.623756][T21427] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 580.632410][T21437] CPU: 0 PID: 21437 Comm: syz-executor.3 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 580.642482][T21437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.652572][T21437] Call Trace: [ 580.655935][T21437] dump_stack+0x18f/0x20d [ 580.660285][T21437] should_fail.cold+0x5/0x14 [ 580.664889][T21437] should_failslab+0x5/0xf [ 580.669303][T21437] kmem_cache_alloc_node+0x25c/0x760 [ 580.674595][T21437] __alloc_skb+0xba/0x5a0 [ 580.678937][T21437] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 580.684577][T21437] ? netlink_autobind.isra.0+0x21b/0x300 [ 580.690217][T21437] netlink_sendmsg+0x97b/0xe10 [ 580.695000][T21437] ? aa_af_perm+0x260/0x260 [ 580.699503][T21437] ? netlink_unicast+0x740/0x740 [ 580.704454][T21437] ? netlink_unicast+0x740/0x740 [ 580.709399][T21437] sock_sendmsg+0xcf/0x120 [ 580.713941][T21437] ____sys_sendmsg+0x32f/0x810 [ 580.718719][T21437] ? kernel_sendmsg+0x50/0x50 [ 580.723410][T21437] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 580.729603][T21437] ? print_usage_bug+0x240/0x240 [ 580.734556][T21437] ___sys_sendmsg+0x100/0x170 [ 580.739245][T21437] ? sendmsg_copy_msghdr+0x70/0x70 [ 580.744367][T21437] ? __fget_files+0x277/0x400 [ 580.749063][T21437] ? lock_downgrade+0x840/0x840 [ 580.753930][T21437] ? rcu_read_lock_held_common+0xa0/0xa0 [ 580.759578][T21437] ? check_preemption_disabled+0x38/0x220 [ 580.765314][T21437] ? __fget_files+0x299/0x400 [ 580.770009][T21437] ? __fget_light+0x218/0x280 [ 580.774730][T21437] ? sockfd_lookup_light+0xc6/0x170 [ 580.779937][T21437] __sys_sendmmsg+0x195/0x480 [ 580.784632][T21437] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 580.789666][T21437] ? lock_downgrade+0x840/0x840 [ 580.794547][T21437] ? __mutex_unlock_slowpath+0xe2/0x660 [ 580.800101][T21437] ? wait_for_completion+0x270/0x270 [ 580.805416][T21437] ? __sb_end_write+0xf8/0x1d0 [ 580.810185][T21437] ? check_preemption_disabled+0x38/0x220 [ 580.815908][T21437] ? do_syscall_64+0x17/0xe0 [ 580.820506][T21437] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 580.826323][T21437] ? rcu_read_lock_any_held.part.0+0x50/0x50 18:47:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r7 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0x4114, 0x8, {r6}, {r8}, 0x33, 0x5}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="857e00000000000000000f000000"], 0x14}}, 0x0) [ 580.832315][T21437] __x64_sys_sendmmsg+0x99/0x100 [ 580.837262][T21437] do_syscall_64+0x60/0xe0 [ 580.841686][T21437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.847570][T21437] RIP: 0033:0x45ca59 [ 580.851466][T21437] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.871074][T21437] RSP: 002b:00007f083c407c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 18:47:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80c00) 18:47:19 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) memfd_create(&(0x7f0000000040)='@&', 0x3) 18:47:19 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40000, 0x0) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0x18, 0x20, 0xa7, &(0x7f00000002c0)}) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff31}]) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) r5 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}]}) r6 = clone3(&(0x7f0000007740)={0x1080, &(0x7f0000007500), &(0x7f0000007540), &(0x7f0000007580), {0x40}, &(0x7f00000075c0)=""/94, 0x5e, &(0x7f0000007640)=""/173, &(0x7f0000007700)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000077c0)={0x10001, 0x8, {}, {r8}, 0x100000001, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007f00)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc, &(0x7f0000007e40)=[{&(0x7f0000000240)={0x18, 0x1a, 0x400, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@empty}]}, 0x18}, {&(0x7f00000006c0)={0x20, 0x23, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x67, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}]}, 0x20}, {&(0x7f0000000700)={0x254, 0x27, 0x8, 0x70bd29, 0x25dfdbfb, "", [@nested={0x103, 0x51, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x31}, @generic="23fd589a40fd53580263b323c946b829cc48285b5d3a5bcb315b4c3453070510723bfbc09ab2b0fe23f5f7097f45f3b0e0b3cf09739c7ab57f78b835fe3623b31ca40ee0e16342cec8165bc96ab407e192b8898c839b12cebd26d233b2c50c0f3be9753dc8ef8f86a7440e3b7292f246867e69620b44e6848f3ad6847a1827e44a66f36335d42701cb162d738bce2361c076826e84e59f32990e88199acace18c3fc50f267a7453c06892db96969a869198e29fa53262cf0d56018146ca332fd2f6c1f725c865f417a34ba3874ccd573440b9a63b0ad4f229347994db98c8d30f7b1272722d789eff0d360", @typed={0x8, 0x65, 0x0, 0x0, @pid}]}, @typed={0x8, 0xf, 0x0, 0x0, @fd}, @generic="eaff95e294926ef29faa2cd09a559e051680ccb46745843aff73f64fed", @generic="6d60738600c518c3ac7e208fb02c99472d7cd6afcc04809404bc8eacf48dcb1bb1d94f1090d814a2264dbaefd01dcc", @nested={0xeb, 0x2b, 0x0, 0x1, [@generic="7fda7e6932f729e5ec746f6b8d87e5e9ccf0bbe07aac6e293a37c037ec88cdc54d8d2c19395e3295f0b7ada740f582b54eeb4b46b9a01ab2fe8a0978ba4a1c83585b0418781dabb35dedf430fd1f82cb566ab1b7979d06c089a729973402eb0dddc7cb4b110fdcffc17c093aad973ef09d983cc14bea8dee9977c3f7bfa82b48f05708653b33e0358b4bfec42d6945299c3df2e45a6e76b2fefe336f4544dbf708848b67882afe8f926bf322c93a080bf7cd0ba6f5a85441b754424e649991b9c1871fc8c0755fd065583ff092a1ebe82cfc2ca3de3e9d9ca7687d30f02ef8041d824a3f98d281"]}]}, 0x254}, {&(0x7f0000000980)={0x2150, 0x3a, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x2140, 0x56, 0x0, 0x1, [@generic="2956f861312d22db4f0a01dda299c8d218264f687cacc644a550934524910b581ee6176a97843e7354560654f52343a950f9eb6ee1b9da0e42", @generic="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", @typed={0x8, 0x4d, 0x0, 0x0, @pid}, @generic="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", @generic="6d0b0adb714e486fed62ca65426c87cf4e98b0a3680ba5a5e0b1eb7df8bb8841a74a1159d0d52b725a4f55f2450f818885dede1cb05a27ea6bb0d88440956aaae1c082ac4db3f7fccbdcee5bca9c5e8c734fa049321fd48560efb1eba47230977120c5e50a6676cdbf26c37b1b55bd2d72df0146005b8e601515d1d5", @generic="86bc50a66301f5ebe47fe1cfb4d217240f5cff72bcfd09a971cc4dbc77d6cec7cd0525922270eb90891de2fd43d3e9a405439a530497de3e2dc6b0466d4d1e0bd6f3ab5a697745badd61062b0af14f2dc7eb0a8bbd2613f7fc89c044d2dc3ee66b1d5c55c8f3b557f2a2e6b64c3d3f8e13f034879f2229eadd5f61e6d7dc7c"]}]}, 0x2150}, {&(0x7f0000002b00)={0x1c, 0x41, 0x24, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x4, 0x67}, @typed={0x8, 0x3d, 0x0, 0x0, @uid}]}, 0x1c}, {&(0x7f0000002b40)={0x1354, 0x1e, 0xb30, 0x70bd2a, 0x25dfdbff, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0xfffffffffffffff7}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x3f}, @typed={0xe, 0x76, 0x0, 0x0, @str='/dev/null\x00'}, @nested={0x1a5, 0xd, 0x0, 0x1, [@typed={0x8f, 0x23, 0x0, 0x0, @binary="4b25783064933de6d2ff23241f67f7b12e987851fe918370d33292f5137bf40de8920388a97a75f631e97f3c2dc72d62608ac280e7cb2fec477821ecc6485a82a695b9be3a1a2ee29d1ae5c0d9453321c00aa6d51aadb71f6a44a832d612fa41855759f617763d898727da8969a6ac0a1d4ea5e082ca77218622d8dcdd5d0cea96be2b1e25fae9ff7eb716"}, @generic="c8051e05084b8f6ddc02f02d55821d2b1b94f2f3270366b0aa7a626a777277b45f51e3b13880dc0993625314759dffa83947b076403ef8f9d4f6170372f2a86b2935571e41cd56afb59dd9f80b2cd1183b0e8f4f1e51598e1ece240f4e65c1730061817a2e0fad6694b1486ab81f6b788b048d2f75fe764f2111f4b1ece85b8a898c1d3374a2ffa21c3fe777bc", @generic="b98a5c1b9548354abdfe8e61a06944418405ea27c3bb25e097f34e8761cca31ec1652a5d168c4c78a487ec22e4c7e0b4213654a1e3da9469e8c54253068a47", @generic="f91bca45afed2460cda58812e9c802a2bf2ceaf95541bfccbce2b2140007d676ad5715ef9aedb12f5eac1194b2243ad259d2cf8a6772e47bc46b7b4dcc", @typed={0x7, 0x4b, 0x0, 0x0, @str='/*\x00'}]}, @typed={0x8, 0x4c, 0x0, 0x0, @fd}, @nested={0x1082, 0x5e, 0x0, 0x1, [@generic="9e69f8565892e62060fc03606b791bed3415f4b0f56ce47cf2ea5878652092b84fd2c80154f814a3bd598e0c17e5adf9e6908cbe6be9023a9a16e54d356dc97c12143aee931c686fb6e100", @typed={0x4, 0x4f}, @generic="d80a80eb83fbbfd89f0b4c555b4d36c86705076f0564a6b5698f84906e496c0e42f54f", @generic="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", @typed={0x4, 0x76}, @generic="3dd517b421447944"]}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}, @typed={0x8, 0x3a, 0x0, 0x0, @pid}, @generic="df", @nested={0xd2, 0x7c, 0x0, 0x1, [@generic="81dfdaa0543f861d5f29e2a8d857545d3363c706e8e9e12bfbf8454b61aff749e0a3c82a67cc284b05928cb8792155ce139f4d903563e38e11d97b6f4625cabe02d11a2ec5f866a905254a071dbbe86b91d9ea118a2e41883b61e8a06414f1957c1f4d65937c457db9304b7cd145eff95ab69924b52c235237a14217886e55ef583d1df0dcafb67981923eaf112ce3fc72f4ec67bf3503323a95d992533558b55ff3efdf64ab6cac9a5075d6a80ab3cf9542bca24993702f6b3a", @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@ipv4={[], [], @rand_addr=0x64010101}}]}]}, 0x1354}, {&(0x7f0000004000)={0x34e4, 0x13, 0x0, 0x70bd28, 0x25dfdbfc, "", [@generic="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", @nested={0x1010, 0x1f, 0x0, 0x1, [@typed={0xc, 0x2d, 0x0, 0x0, @u64=0x2}, @generic="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"]}, @generic="62b7fe66a76e1e", @nested={0x2c, 0x64, 0x0, 0x1, [@typed={0x14, 0x63, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x7ff}, @typed={0x8, 0x40, 0x0, 0x0, @pid}]}, @nested={0x228, 0x8d, 0x0, 0x1, [@generic="ae775c7937cf9e12538e0a3943282baa8a176ce58757302bc6b88a3afebb6726edadd6d9f97a86d1340eb041e48aa232456996bcafebfd1a3e1fb80d97d1858662f6f37f494d476e5b652c538390d00310cec6fe44c9bc541b724effcdf4dac14c22b9296e99cdbc1b2ca262c78ce77e247165f32c5a810e3b29695cd2f6c89a9e5ee931cc0998ba9c0aff20f5c78f4c351e0867c1bd48535a92e3fed37725fe6495c09334b262cd32c2c6573df6bcd4ae505faca12f0bbbcf627cd2", @typed={0x8, 0x20, 0x0, 0x0, @pid}, @typed={0x8, 0x5d, 0x0, 0x0, @uid}, @generic="c8fbd05b6e5ba87133113b1e2ae125d8063f01c9564578f50c23c01a8a8a45849f39090e61a7cba85ee5c7ec33176c6b35e6b7365f285319675599f8140af92fb28de6a76f5111e1cd9d89641801ddd71d9071b3b93652b2f7109bfa1693c27ff452d99fc03a0b53f5394ea28ca993235eea67c0efb0f5d348e8eb03910be619431d3656ec8d6f05f44688", @generic="e6f9a81adca24c93befc27d0d171768924559fda1c01dfbe018757679b9d8d8bf81bd5aa1a31e0d61b7e2d2b6d64caa3fd4c5cbf92dc22b56f8f98df6642357331b51a60031c5f5ec6349b2089604c873c2c29acd0eccd8c859b6653577aa43d17dbba1dcfbda770b7c604669e17e64326640b27f560fc2824c0f75db1158d77ba5bb5312ea1e59bcd37c0074ed7731dc0417fb7f2de522375e1909f2b7fb7aaba6441ea8992e860489dbb77aed6d8e9c17c66237c1ef95814000c2381714d695fdaa67f446fd70a0efe51e720"]}, @nested={0x6d, 0x70, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @fd}, @typed={0x8, 0x50, 0x0, 0x0, @uid}, @generic="e830295ac5db68824780c0a14d281721b6d7655540e101fbf8c110bf06ac5390667b5c887db17cf8cf1408e52b7e89962def0b5b2baeefd8b86006824d4fc7382c554a0220cb2b9acb95a0afe134fbe5399915dcea5ee077df"]}, @nested={0x11f6, 0x8e, 0x0, 0x1, [@typed={0x1004, 0x8b, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x2}, @generic="f5879d89742ecc8091b3cb7921cfd5b256cd0854640e2eaa44f01de8e71197f07cc116dd9aea66cb1a35138e679f409419d4085c20b6daee4d4d0b760d3027366a4f4bc1d76f556e51df5c1138e6e9d2f5b6c4e8ab677b8a9fbca63f65ff8b92b2910ac7691cab6c3407732375bffd12b3cd321c19ae26ba7240bd1050c30cf6fd8b9368abbd4335d1d7e0b5b9c8922e80ea60275e6d9c34b88e512b313fecd9b0b10af128e2c640fb301d4958e0e52386ba07e92074d2bcecc81527d8dce4578337f85c3e448dcb5c952f5c4d35fe28543eb59f618de031fc0855", @typed={0x8, 0x58, 0x0, 0x0, @uid}, @generic="294938d5b85ba1a6cae2ff90da92ea7a5ba87c81360471d59842da51bd6cd5c45f000733fb6b29bfbaf9b3669333eb24b73d82efe67aa1778eccdfdeea20aa34ff7f49be45ed51d991b76e1d4692da90298e3d3fd402eb4bee2c54e31272b82f03452a641f956fcc8ea07b4bd4c99938a11bc014948c3fe992609f47ef87218f75f50b79f7c6dfa1284f8a13011183bcac29050a0104fc5247963c68700c77843a040334e3d47c2600ca21a9efe0872084fd163b877bb1a475f182b2d7599e0e38600519b2e133d257cdf76594c6ab4a805defd5700f2d291510422d2edc7f0c9cbb9c2fe0ed04b74a9a69", @typed={0x4, 0x5f}, @generic, @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@private1}]}]}, 0x34e4}, {&(0x7f0000007800)={0x60c, 0x19, 0x100, 0x70bd2a, 0x25dfdbff, "", [@generic="538b1d4ae7541033a7d00f7eaadd60b3c84bd1ecfd800cb890ace9a644bf308eba0b4c8cc49b9201ceedad96ce98cb8d6ae00b645d2f7435011bdc1597d8dd2f078d569e5877785a43cf4abe12a742af1a2472b4efb91751fbbdbe8367b6348718b97a9e33d01d9ad29c5e2e0949f60f68761f9daccd000d136ceaed50c47f071a00037ad48267f1f247e7a139760d17dd32531a1892e3f77cc98c1a77a52e96c6107b4adf675170bd63fd53159196fbc5484094dfc4f49bb8f97a0d483fe75b51a8b4ad951ab922b68a73e135a00c9372d7236f12f0273fb1fc48c45a6f66e0bdd421840f391fac964f6949dea610d717", @typed={0x8, 0x72, 0x0, 0x0, @fd}, @nested={0x166, 0x86, 0x0, 0x1, [@generic="d011613043545052488addb75870248872d6487b3e67b66ff4d2bc25057e6c436bfdc0ed12293c10c9c8df4e8ad3dfd6a2cdd973113a87f73545ae0c967c3c6eb121b1c78cc0b1cb8e13a1180c6bc3a717ae8b7bcc21dd4da52f354b41bdd537a62bd6bbf5b9731670ca37a1d958417d2f9023cf8327b2ea3da9e09a80fd5ce8744e5ea656a28e00bf3dbce8b7776f7afd649a49f05a4e39253aa793c2c5f926e268adc4626ae6d2bdc78e82", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@private2}, @generic="21d21e0e9bdaad359de184befbb805f6cc6e08f49d0be62b68d81c23396eeef5a27fdd4600ae5fdd1dc86a87d01d9ccf6c4da3fcf0e3555822fb80de3a1af8bc493712b6fb81b9fee54272046d645dfb945dd0075f9f6715037786a3771573925bc409748c31d6814c2d8e97103f676c5491201b45a3260fa164137c02ff7099bec04c40ed574325d6a39af9b5eba5b008ac68c7ef05bde66c233946207c41d0ccde"]}, @nested={0x14c, 0x16, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@remote}, @generic="ddd8ea464960ed859a6ac6f54295f677b4580859493a94d592953b89ff29c1e35ffbffc0d309eb4ebee38d06668c575295417fab75a3d0e26022cf11cf59cc780ef166e7084b49b0eb3beabb1b521ebe2d936ff3d9eba983b4d713ce92feb47558475da3dac233f0b6c06ae204869d984253fd26a8581f7a182176c6258b7ddbeeb6c5cf741d6d8140672463801b67f6efb880950b02292f58", @generic="3e2167f6c4a8c18e773a543b48c2eafd9fc3ce255c61369b27fc2c31e488093b5288960821c96eaf9dd4e041a6e091cbf6601833ab0865d169ce3aeec7a9a85fd77d99fd4425f2ecf6f9f496f24be533c8762c17eabd7f04c33200f8bca41ebd0bbf1da348fa72294a0e3904ac19416438a454265e2ad264a72ee015879940", @typed={0x14, 0x44c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x30}}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x101000000}]}, @nested={0x167, 0x14, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x1e}, @generic="4599d248a45c609e57c5216657cef0810b9cc8d916cf0abbb34984261bde64b5fe31bf168ceebaa3561063b619d0cc900a79b2d3b4a32e62c7cef28b76f4df70956f2d0d00dcbff7bb09f368e6ff979f49693683588b01bdd8c96531947e55540535012f054ca22b603dd89558e05697d0e8e09e46dcad426db29ac58ad00d35c5b461e8102db4a843af72ed7087578ebfdc0afa087596fae5775a5505d8b5d6a8491345b52be6a0dfe61f3bf0d38715674d29c78f7791507829b755c7023ac1798e40e702199d5905696071fd9d08a6dafaa7c689ce0901ff7745de28cd3b10f57e42750501de61fae551394a52634191", @generic="2770a1d7a04ef6610e4cc37ac5e78ad5b54600d33094803999dd7364b219a2bd966340eea4bd5179b9ec0f6f2c804098bb77f1dacd82a2519f2acfca9d067d09c77829a45f7162827547633b83e3655b56687a41305acca700cf3c3d146f3260fdb79c2ad9bf"]}, @nested={0xdc, 0x56, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r4}, @generic="4f78cec33cefb52358ef9fa6e3734113cde88d2ae6d8362cecfda03537fff15e27a12486451df3865b0c786bd647376f9bdcece6d01b64b5572039b04fa650520b282cae6f87347df465838ccedf8d88e85b88ab9d2ca7bf457327be0b36638270c7ad393f8c7b7ab11b1fc53389a65fa87d35a539f8137baf09e1c98e3e5b2bfe549fc2dde339b35270abba0f746887d96e4f5c9af582f057aa28cf034a598419ee53089189241392fbce7afd3317dcf576519d16a8523fd8223504"]}, @typed={0x8, 0x89, 0x0, 0x0, @uid=r9}]}, 0x60c}], 0x8, &(0x7f0000007ec0), 0x0, 0x4040010}, 0x80) 18:47:19 executing program 2 (fault-call:8 fault-nth:3): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 580.879494][T21437] RAX: ffffffffffffffda RBX: 00000000004fd380 RCX: 000000000045ca59 [ 580.887469][T21437] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000004 [ 580.895534][T21437] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.903865][T21437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 580.911843][T21437] R13: 0000000000000900 R14: 00000000004cbcfa R15: 00007f083c4086d4 18:47:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600000, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:19 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000040)=""/197) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 18:47:19 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0x92, "ee4f98731edc9fb2f4ead1f1823856209e7ddab0a192eb988253d99935844daca915e1fdb2803b220aede94890009ed6401f428257b22260009848d79b6979a2d009a04f47a079e2f5c70a26561582903cd84e56b86e9a2cecb077a32fc828b914f9ecd1e3284c4e4e41ca31ad96ea9e43cddb863dc1874fa29fc59f181dcf6e7f3bd925bf325ef39329749a43818659fce6"}, &(0x7f0000000000)=0x9a) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e24, 0xb3c, @private2={0xfc, 0x2, [], 0xf}, 0x3}}, 0xffffffff, 0x8c7b, 0x6, 0x4, 0x81, 0x12, 0xc9}, 0x9c) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765302c75707065726469723d2e2f66696c65302f2e2e2f66696c65302c005dfdf68aaa4d3b8b2a46986a7d88233288c16869ccb7473d85a82af030b8ea0870d300"/95]) 18:47:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0x1b, &(0x7f0000000240)=@assoc_value={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001000)={0x6, 0x8000, 0x100, 0x8, r6}, &(0x7f0000001040)=0x10) r7 = dup(r2) recvfrom$rxrpc(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x40002000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:19 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x24141) [ 581.283823][T21465] FAULT_INJECTION: forcing a failure. [ 581.283823][T21465] name failslab, interval 1, probability 0, space 0, times 0 [ 581.317120][T21473] overlayfs: unrecognized mount option "lowe0" or missing value 18:47:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x2) [ 581.373136][T21465] CPU: 1 PID: 21465 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 581.384776][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.402018][T21465] Call Trace: [ 581.405451][T21465] dump_stack+0x18f/0x20d [ 581.409835][T21465] should_fail.cold+0x5/0x14 [ 581.414443][T21465] should_failslab+0x5/0xf [ 581.418897][T21465] __kmalloc+0x2d9/0x7a0 [ 581.423153][T21465] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 581.429580][T21465] ? tomoyo_realpath_from_path+0xc2/0x620 [ 581.435317][T21465] ? lock_release+0x800/0x800 [ 581.440009][T21465] ? print_usage_bug+0x240/0x240 [ 581.444965][T21465] tomoyo_realpath_from_path+0xc2/0x620 [ 581.450534][T21465] tomoyo_check_open_permission+0x26d/0x370 [ 581.456445][T21465] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 581.462552][T21465] ? apparmor_capable+0x533/0x860 [ 581.467911][T21465] ? from_kgid+0x87/0xc0 [ 581.472398][T21465] ? from_kuid_munged+0x130/0x130 [ 581.477479][T21465] ? lock_downgrade+0x840/0x840 [ 581.482539][T21465] ? do_raw_spin_lock+0x120/0x2d0 [ 581.487590][T21465] tomoyo_file_open+0xa3/0xd0 [ 581.492377][T21465] security_file_open+0x6e/0x3d0 [ 581.497984][T21465] do_dentry_open+0x355/0x11a0 [ 581.502775][T21465] path_openat+0x1e9e/0x27d0 [ 581.507409][T21465] ? path_lookupat.isra.0+0x530/0x530 [ 581.512888][T21465] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 581.518882][T21465] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 581.524880][T21465] do_filp_open+0x192/0x260 [ 581.529411][T21465] ? may_open_dev+0xf0/0xf0 [ 581.533939][T21465] ? do_raw_spin_lock+0x120/0x2d0 [ 581.538990][T21465] ? _raw_spin_unlock+0x24/0x40 [ 581.543858][T21465] ? __alloc_fd+0x463/0x600 [ 581.548447][T21465] do_sys_openat2+0x585/0x7a0 [ 581.553164][T21465] ? file_open_root+0x400/0x400 [ 581.558064][T21465] ? __mutex_unlock_slowpath+0xe2/0x660 [ 581.563631][T21465] ? wait_for_completion+0x270/0x270 [ 581.569057][T21465] ? __sb_end_write+0xf8/0x1d0 [ 581.573928][T21465] do_sys_open+0xc3/0x140 [ 581.578270][T21465] ? filp_open+0x70/0x70 [ 581.582524][T21465] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 581.588381][T21465] ? do_syscall_64+0x1c/0xe0 [ 581.592981][T21465] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 581.598975][T21465] do_syscall_64+0x60/0xe0 [ 581.603399][T21465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 581.609295][T21465] RIP: 0033:0x45ca59 [ 581.613197][T21465] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.633046][T21465] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 581.641607][T21465] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 581.649865][T21465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 581.658292][T21465] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 581.666372][T21465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 581.674359][T21465] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 581.708137][T21465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.738124][ T29] audit: type=1804 audit(1593024439.861:128): pid=21465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/385/file0/bus" dev="loop2" ino=2 res=1 18:47:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00000000000000000f0000008ac73c45a47c14a2ef35475a4509fc37e834c7f1445b98e7d7682eb73df95bc20ecd6662ae929041c9df0ea3f67104d535c7510b707ee2000165778c0e0b38270e086dd9a17169ddc17e3eb79b4b75ded4c524752370e40d66dd6ae65f11edb76f57658540006a814d72bd1342913756fe7e544ac638e97343a6bfc559fae2718f6590220e1ec58895fa81603dfb34e4b850f9025709a1db4cc94b8cc7a3870b6d91f3f3d64d7774d8afbfe9151c2251000000000000000000"], 0x14}}, 0x0) 18:47:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x800) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:20 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}], 0x20}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010009000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000800", @ANYRES32=0x0, @ANYBLOB="020004008f8bfdffc76b2adc94ce3b35b583e920d033c0660000000000000027832fba2b4918542ed51bacc2ffffff7f00000000a28d835e0121d356a10ab71ea1357e16b37c166d71b8c8e842453bb9d260d3acdc1bc3f45288effee51fd3d71c0ab800000000000000", @ANYRES32=0x0, @ANYBLOB="02008750", @ANYRES32=0x0, @ANYBLOB="040001000000000008", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="10000100000000002000050000000000"], 0x54, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f00000013c0)=[{&(0x7f00000002c0)="3c8bbcd1e3ab58237f7b1b10dbc9eda7817817aa10806f2dbe1f8c6070d55513cbecea2fec188d6ddebd73c30246f36bb98993f57908f60de51c7aff6bf1c04266bfa4dbb9eb134bc30197cb848dc88ab26caefe55a9b5075462b374bd06ed8c44128001341115b77b9ada8e70cdc53b7585c2f985e6f12fe410e5b7f8fc1cb4f6a62c8ac4eecc976360579c63cd801520570ade548b44dbc91d5193029a11c2e6e865c9f8c97ce74ec9e01615cd6c4581dc619821f1f4757ef64d01668a9a41c12be705835a5aabc353145bb3dd42f384b5b5a55346d19b98ff097667cfd5ee", 0xe0}, {&(0x7f0000000100), 0x0, 0x5}, {&(0x7f0000000200)="d8c9e56eb1863a37e94eac4ccab993740c8334e051257db726b0cbefaeaeb7bca8f1bf2429edb725cf82b87519a08b01b085aff72c223a468f4cc5a21ed316fc26dfdc4149453025a4b96dc2", 0x4c, 0x6}, {&(0x7f00000003c0)="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", 0x1000, 0x4ab5}], 0x302040c, &(0x7f0000001440)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=0x0, @ANYBLOB=',grpjquota=@\\.++%$,test_dummy_encryption,noinline_data,disable_roll_forward,mode=adaptive,smackfsdef={,uid<', @ANYRESDEC=r6, @ANYBLOB="2c726f6f74636f6e746578743d73797361646d5f752c66736d616769633d3078303030303030303030303030303030352c6170707261693504000000000000746578743d73746166665f752c657569643d", @ANYRESDEC=r8, @ANYBLOB=',obj_role=,seclabel,\x00']) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f728e646972352e2f66696c65362c6c6f7765726469723d2e2f66696c65302c75708100000069729e16da42933d2e2f66696c65302f2e2e2f66696c65302c00"]) 18:47:20 executing program 2 (fault-call:8 fault-nth:4): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x3) 18:47:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x4) [ 582.085379][T21505] FAULT_INJECTION: forcing a failure. [ 582.085379][T21505] name failslab, interval 1, probability 0, space 0, times 0 18:47:20 executing program 1: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x2}, 0x10) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x40, 0x3, 0x5}, 0x9}}, 0x18) [ 582.183981][T21505] CPU: 0 PID: 21505 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 582.194266][T21505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.204672][T21505] Call Trace: [ 582.207969][T21505] dump_stack+0x18f/0x20d [ 582.212375][T21505] should_fail.cold+0x5/0x14 [ 582.217088][T21505] should_failslab+0x5/0xf [ 582.222553][T21505] __kmalloc+0x2d9/0x7a0 [ 582.226991][T21505] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 582.232988][T21505] ? tomoyo_realpath_from_path+0xc2/0x620 [ 582.238723][T21505] ? lock_release+0x800/0x800 [ 582.243585][T21505] ? print_usage_bug+0x240/0x240 [ 582.248630][T21505] tomoyo_realpath_from_path+0xc2/0x620 [ 582.254301][T21505] tomoyo_check_open_permission+0x26d/0x370 [ 582.262389][T21505] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 582.268057][T21505] ? apparmor_capable+0x533/0x860 [ 582.273098][T21505] ? from_kgid+0x87/0xc0 [ 582.277370][T21505] ? from_kuid_munged+0x130/0x130 [ 582.282408][T21505] ? lock_downgrade+0x840/0x840 [ 582.287301][T21505] ? do_raw_spin_lock+0x120/0x2d0 [ 582.292342][T21505] tomoyo_file_open+0xa3/0xd0 [ 582.297030][T21505] security_file_open+0x6e/0x3d0 [ 582.301976][T21505] do_dentry_open+0x355/0x11a0 [ 582.306756][T21505] path_openat+0x1e9e/0x27d0 [ 582.311362][T21505] ? path_lookupat.isra.0+0x530/0x530 [ 582.316735][T21505] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 582.322719][T21505] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 582.329141][T21505] ? lock_acquire+0x1f2/0x8f0 [ 582.333830][T21505] do_filp_open+0x192/0x260 [ 582.338350][T21505] ? may_open_dev+0xf0/0xf0 [ 582.342865][T21505] ? do_raw_spin_lock+0x120/0x2d0 [ 582.347904][T21505] ? _raw_spin_unlock+0x24/0x40 [ 582.352760][T21505] ? __alloc_fd+0x463/0x600 [ 582.357278][T21505] do_sys_openat2+0x585/0x7a0 [ 582.361969][T21505] ? file_open_root+0x400/0x400 [ 582.366820][T21505] ? __mutex_unlock_slowpath+0xe2/0x660 [ 582.372373][T21505] ? wait_for_completion+0x270/0x270 [ 582.377663][T21505] ? __sb_end_write+0xf8/0x1d0 [ 582.382438][T21505] do_sys_open+0xc3/0x140 [ 582.386772][T21505] ? filp_open+0x70/0x70 [ 582.391023][T21505] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 582.396574][T21505] ? do_syscall_64+0x1c/0xe0 [ 582.401165][T21505] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 582.407178][T21505] do_syscall_64+0x60/0xe0 [ 582.411605][T21505] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 582.417498][T21505] RIP: 0033:0x45ca59 18:47:20 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x8, 'sit0\x00', {'sit0\x00'}, 0x7ae5}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$l2tp(r6, &(0x7f00000001c0)={0x2, 0x0, @local, 0x3}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCSMRU(r8, 0x40047452, &(0x7f0000000140)=0xfffffffc) symlinkat(&(0x7f0000000000)='./bus\x00', r4, &(0x7f00000000c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f77dfb3f365726469723d2e2f66696c65302c75707065726469723d2e2f66696c65322f2e2e2f66696c65302c00"]) [ 582.421401][T21505] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.441012][T21505] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 582.449426][T21505] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 582.457402][T21505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 582.465373][T21505] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 582.473353][T21505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 582.481352][T21505] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 582.495377][T21505] ERROR: Out of memory at tomoyo_realpath_from_path. 18:47:20 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x305081) 18:47:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x73f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x90c2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000100)={{0x7, 0x0, @reserved="f13935491530afc1123f47f759688a8061afe19b235876e62f10fa2613a59251"}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00'}) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 582.542561][ T29] audit: type=1804 audit(1593024440.662:129): pid=21505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/386/file0/bus" dev="loop2" ino=2 res=1 18:47:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x5) 18:47:20 executing program 2 (fault-call:8 fault-nth:5): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 582.701567][T21530] overlayfs: unrecognized mount option "lowß³óerdir=./file0" or missing value [ 582.889828][T21542] FAULT_INJECTION: forcing a failure. [ 582.889828][T21542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 582.903073][T21542] CPU: 1 PID: 21542 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 582.912964][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.923026][T21542] Call Trace: [ 582.926329][T21542] dump_stack+0x18f/0x20d [ 582.930676][T21542] should_fail.cold+0x5/0x14 [ 582.935280][T21542] __alloc_pages_nodemask+0x17a/0x810 [ 582.940659][T21542] ? __alloc_pages_slowpath.constprop.0+0x25e0/0x25e0 [ 582.947433][T21542] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 582.953422][T21542] ? __kernel_text_address+0x9/0x30 [ 582.958711][T21542] ? unwind_get_return_address+0x5a/0xa0 [ 582.964348][T21542] cache_grow_begin+0x8c/0xc10 [ 582.969117][T21542] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 582.974583][T21542] __kmalloc+0x6dc/0x7a0 [ 582.978919][T21542] ? tomoyo_realpath_from_path+0xc2/0x620 [ 582.984647][T21542] ? print_usage_bug+0x240/0x240 [ 582.989591][T21542] tomoyo_realpath_from_path+0xc2/0x620 [ 582.995145][T21542] tomoyo_check_open_permission+0x26d/0x370 [ 583.001067][T21542] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 583.006704][T21542] ? apparmor_capable+0x533/0x860 [ 583.011744][T21542] ? from_kgid+0x87/0xc0 [ 583.016013][T21542] ? from_kuid_munged+0x130/0x130 [ 583.021044][T21542] ? lock_downgrade+0x840/0x840 [ 583.025914][T21542] ? do_raw_spin_lock+0x120/0x2d0 [ 583.030955][T21542] tomoyo_file_open+0xa3/0xd0 [ 583.035639][T21542] security_file_open+0x6e/0x3d0 18:47:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000007c1ddda4161f3000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000007c1ddda4161f3000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r9}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x34, 0x52, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff}, @NETCONFA_IFINDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0xc010) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x0, 0x0, {0xf}}, 0x14}}, 0x4000004) 18:47:21 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=@dstopts={0x76, 0x15, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0xfb, 0x4b, "39ee55c17a2cbc22479cdeb69140d054c2a1d501287b61bf841fb50e79603b97138c64966bb301298f0576fed1f007acfb20d26c516633a7e75d1d7efdcadb0a04fda365b8037fea5a51ff"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x20, 0x7f, [0x6, 0xfffffffffffff800, 0xfffffffffffffffd, 0x9]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x401, [0xff, 0x4]}}, @ra={0x5, 0x2, 0x9}]}, 0xb8) fcntl$notify(r0, 0x402, 0x10) 18:47:21 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x54, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_STATUS={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c003}, 0x440c0) 18:47:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x6) 18:47:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 583.040624][T21542] do_dentry_open+0x355/0x11a0 [ 583.045390][T21542] path_openat+0x1e9e/0x27d0 [ 583.049997][T21542] ? path_lookupat.isra.0+0x530/0x530 [ 583.055374][T21542] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 583.061362][T21542] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 583.067350][T21542] ? lock_acquire+0x1f2/0x8f0 [ 583.072040][T21542] do_filp_open+0x192/0x260 [ 583.076551][T21542] ? may_open_dev+0xf0/0xf0 [ 583.081066][T21542] ? do_raw_spin_lock+0x120/0x2d0 [ 583.086112][T21542] ? _raw_spin_unlock+0x24/0x40 [ 583.091224][T21542] ? __alloc_fd+0x463/0x600 [ 583.095748][T21542] do_sys_openat2+0x585/0x7a0 [ 583.100447][T21542] ? file_open_root+0x400/0x400 [ 583.105329][T21542] ? __mutex_unlock_slowpath+0xe2/0x660 [ 583.110880][T21542] ? wait_for_completion+0x270/0x270 [ 583.116168][T21542] ? __sb_end_write+0xf8/0x1d0 [ 583.120934][T21542] do_sys_open+0xc3/0x140 [ 583.125246][T21542] ? filp_open+0x70/0x70 [ 583.129469][T21542] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 583.135045][T21542] ? do_syscall_64+0x1c/0xe0 [ 583.139622][T21542] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 583.145606][T21542] do_syscall_64+0x60/0xe0 [ 583.150101][T21542] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.155974][T21542] RIP: 0033:0x45ca59 [ 583.159853][T21542] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.179451][T21542] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 583.187849][T21542] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 583.195817][T21542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 583.203786][T21542] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 583.211747][T21542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 583.219809][T21542] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 583.252599][ T29] audit: type=1804 audit(1593024441.362:130): pid=21542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/387/file0/bus" dev="loop2" ino=2 res=1 18:47:21 executing program 2 (fault-call:8 fault-nth:6): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x7) 18:47:21 executing program 1: openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x0, 0x602}]) fstat(r0, &(0x7f0000000040)) [ 583.306101][T21552] overlayfs: workdir and upperdir must be separate subtrees [ 583.344106][T21557] overlayfs: workdir and upperdir must be separate subtrees 18:47:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setfsuid(r5) 18:47:21 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x3, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000200), 0x0, 0x9}, {&(0x7f0000000240)="44e187708676f5276e7265a30de591c9d92a58951e663cdce0bce6", 0x1b, 0x8eae}, {&(0x7f00000002c0)="b72eb29bff5e9740a5801ae61ede28059a5a318e540a63e2bbff5b0e21ed51e41fda3e54f9a9e84712446b94d494885dfa4399db54c184de98cc986fe54e436602601b0eb0023bc36d87f5f5075bbde1c421714419b6e40929e29b93c46ca1306cf1278aefbad30c66d00cddeb6365e52bd01b0b941bca591642f1b6fbe1539c2f1d439e7df9ba3ee1ed29643b525a14794999e3cd9d64124dc70e37e9213dfd617c0916ea06f5767edfc042f30ee5ef8733bcd4d1ba7ffb0ed78526a560ed0a9420898b87cc6ad96ed9", 0xca, 0x80000001}, {&(0x7f00000003c0)="297610a7847065c349c8", 0xa, 0x1}, {&(0x7f0000000400)="eb4acdf6925f3ef9516da547a0dfb2c63845a45e2f646d19fe94f1647e4f9424fb205f7d18ce571745bd79da4ead5900d1336b5a2363808d5f8c95a28dcf7c887e26299bc9a764ba012569132eefa0af51b242fe09a5526585ec3db6fa35f9c8a28b9d94032ce690780f6b3fc6583d97ecbcf36985ca6c64477997dd58c287a22cb75d33e7460185880d889539697d6600b3fee0c57d4d29d9cd7197080cde4cdf9eb4f3711278dd4e5d5d5ea4ad2757673365cdc46344ba82ac7eb5be2e14db2725e99f21a60e6ec1e21ba834394b8322abbe96956b7eaa5eac7afd73e075944536", 0xe2, 0x1}, {&(0x7f0000000500)="57e7a185a780c2ed6456a14592717c37cca612ff", 0x14, 0x10001}, {&(0x7f0000000540)="9cfb9f3cbd9f911edde2cb94e2b58035a7a845ff54ab13b9f0f8694f9649e0d68e736f7074018465", 0x28, 0x3}, {&(0x7f0000000580)="d700e81f87db3d318ba493a4", 0xc, 0x5}, {&(0x7f00000005c0)="3f7eea9164fc41de2aec98b4b70e88eb2b879c5e3a9d6106525f98d3c8e2d0aafaa3527993dbf2dfee903fd5e520fd9385cdd9226e78f33df683fd98ea9fb08a436f7f31388951dbac9099183342552373d9f1a87077be7610e8fb1025311121bd612b6bdaa2e7320d647c4cbf09815d2c92c35fbec0bbd85aa3f6d355b9584b16408d43d730722e910b2e1281bc3ad3da6313879a5bc33a3ef6b72566a2486a0ec491a5ce8feb0ab010907aa23a904c8668f417bec945fdbca8a2388e6ff7acce92e11f5c983b8db9", 0xc9, 0x7e}], 0x2000, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}], [{@obj_user={'obj_user', 0x3d, '/'}}, {@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}]}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000004d40)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000004e40)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000005140)={0x0, @broadcast, @broadcast}, &(0x7f0000005180)=0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000000840)=@xdp={0x2c, 0x8, 0x0, 0x23}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000200)="9c8ef56c7b8095b9af8dada10a6c3172b0de328704f302a282bc32ff5bd62113bdea508c5fc219130b528ac4bdafc6", 0x2f}, {&(0x7f00000008c0)="077571193947a737bed4211f74495298790a7b", 0x13}, {&(0x7f0000000900)="e0993d6f9ac5a7410ed9a58758d3d84a52a2272879784d484b20878bcd04754eff3e61a27a1d7acc5c7d22dfc2aa4cac5842890cd6734870ff288a7811e05de713ebbc6fe5ea772c", 0x48}], 0x3}}, {{&(0x7f00000009c0)=@in6={0xa, 0x4e23, 0x4, @remote, 0x2}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)="d6c06b00b46b93de498f71ac6277122543ca50b385b81b2615518513866524ffe1d0281f4eec61", 0x27}, {&(0x7f0000000a80)="6be046037f01c378e11aaa9caa30de20414cf20383111b8bec65c999a42cf0c6cc6d54ebc138d5e4b9ab634894d5af9e0d7e8438dfaab3d84ee8bac676ed7278200e6d3e09734497b8c1fb7dc011d4a95bdb40ab57934b0bd04c5e71f918b56d0b23127df6f8c3ed33f98f475dec06fb38c3e8c5e5db2830ba0c1b566e4ab377b1c7272fff1d35cf241bda55bfbc89dc73eda1e3e7760035289eb380d6a317dee7e3059f802c7570fa427e359777e7c50aa29a864fd8", 0xb6}, {&(0x7f0000000b40)="05493b6c1be87d5fa0d106c633a44259551eb434e78b2933ba6f4f23c9d19e499b4fccff2d5af9b52bfc621e5828ddf2fe779a0e8264c99592c3d8dfcedbdaca722c7da95886d3dc13f8dda8bbd6334d64be89070dd1494f730712f8a36058987f837d83894967a05077e57a749ea49f3d85690629c33bfc40ff7e439d4748edf49a11b922a3fba5b769df8c5bd6e6e964e4c166a35cae8fd71d77526f9bd9fadd8add9ef80184000a2052c49ca21782", 0xb0}, {&(0x7f0000000c00)="486f9340be1bc43cf930f8497e1bffdab1996061c68592b1", 0x18}, {&(0x7f0000000c40)="3d8615384af2fc401ff2315de0de8dcbd6d9914d4c059eef11e166ef4466a4a8ff90fec0c73ec1f3a33daafc18aad3b6392da90962adaa7e5d3724dce22e879620f7cf7a928e0594f3f9bc9119e75f7113dc1efd5fc20e8c13820693baa1c6f0f917c1e898181fb4e6c7baa04a615cb9ca57107943f68ba4448b3fde70312258e8b03eba9c7cd2e2ffe5bd70e0f19378451938dcead3b22d2803c6df223b197162de5f3493e6d6605ff5cc075b0c50350aa554a8184850b934e75fb8", 0xbc}, {&(0x7f0000000d00)="6897fb73acb538ce74280e2b1c8dde6e2bff06375145ac685ac88fd6da9d7916e77df4a579350e7c1943d0f30da363e0288f7c4be7aa44383660ae12078574cf15b1f5e26394af61376ddf4bbd725b34e00b2541dbae386574612e6070675422248497d40f0d5eda474aec211247d8b1af794bef70b9dff42efec75027f2116dc0e933bcf1664e", 0x87}, {&(0x7f0000000dc0)="2020e9c2bd57b7502c1225e8dd417c46bb20eb91371d2e962fb773bc1c4cea000024ea7a30a1fb1898cb42bf3b2ffd9cc9cc592077d6ccb40dd54610bade51afe626c62d487cf909edf97a27b8654f429fb6c4371495d5d19b38ed11d25edc61e3731502ec0db8bafe2e2c33c141d0168af22f25b3352d27081cefb69bad1a4ec6ab3897e18061320928f1560ebfa1503b0709c549b5a27964c4c058537eb2aa3b96e8d340da6e80fd7722fdbe57e4ba9347d8881701", 0xb6}], 0x7}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f00)="087333a1ae914b23bc1703a68ff31cb6525cdd25482a4acd311bc96f0a024252951304394bd8c2d7f0fc1e6122b2ad05605e47550c73d6e37ac932c75107b8297234ec1a8b8c202309b73e053297a300ae156c3bb3d16aca7a943e66655d18e41e616f771801c91e02f308277c04795a0b5dcb67f068511ed9a08c17599281802ed23b46c6e503f32e10f95d1637f3bb393b88d3c308f4b5df9df0d8688c082c4c5848fe31cfab9685a9b2f09898b01f5f725e68762db7c8dc07cf7ce7c64553762797d02b3d90816c0084388160e64240f1a68e", 0xd4}], 0x1, &(0x7f0000001040)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8c41}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{&(0x7f0000001100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @remote}, 0x1, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="5eea90e080705f99fd5a1f73cd3bba9570cbd355c4b3d32f6e3f8b86ebac45f5f01c26604bc949c294850288f4d1c1d23638c9fd56c344728d5cf95d92d249d20bcf48fd25a084c0fd4ff94776655aeba74023f2be42a7f64685e012ea6281d03bbe17fa8bd4efc87efaa14671a244a406bb9dce3c6a446b3618b9708fa8cf5a2e14e7cca8305d77a14bea289d978463389bdd78c8a14cadc3ac29712663647687f45fefa2b343876cb9be0dafd0555bfbca41354e31ba05d1e6f2eeba4eac2108fdb174ad99e4b0b688cf26b93bac8e340b9b385bc2f903121d0ac953716371f34a74bd", 0xe4}, {&(0x7f0000002280)="76897ee3e3ab4615e0492251c649a2a7ffd856cf1f4228aaca8cb6b81421ade33b743b71af087f355149e0ea9e7a5fe5dbe0ff18bfffd67183e3d7ced869fe39213f1df8cf489f16d0dbd423964284315969b45cb65a89e91b896ed1f453e770408e017b494c74508d484d415f39fbb1bc7379ff093eb0159b505ec95fa8ad3a4bb48bca89cd8693f5b90f2fef54abed86e48b4f9c2506b1540ef06022d12091a7465d408502d37328354700eb4a9ea48fcc022ac47fc1353972311d77d921e30b3adbbeeac92c1bd118dcb19e9f6b0b159da4b95af45bef1bd4d4034a8e2e1717f63426f1fd17ceaa75d2331641795455", 0xf1}, {&(0x7f0000002380)="24bb7dc782391399a1633468a1edd276be89a261a8c355b2ab907a83170d5b692caa62c006d61cf8c17178e4ce97fff5054ecc9fb8b38a7fa65ecc09bbe3c3904fa0e38721abe2eb3ddafe14e99a2118594f7d2f531ee6fa44e101e2d9b6ebb7d8dabff5d10ac12e3dfcd7e226f04e0409f704e7bd4432b0b2cf63f7dcc788663432ca58af77d82ec2cf9994ae1693eccd44f946866724b38d127c", 0x9b}, {&(0x7f0000002440)="3f12b535137c8311df6f7ab99e6e810be714446de6d9e88dd8edb6e616921f033fbad2574ca67ff87d45258bcf5ea2dfc649a129d9acdc799623dcb9801829911beea94d4bfc57902fd73c728f338a103feb2afd3900f6d672a23fb5d2994d2fb0a5b599cd71fcbf5c9edb469ef0f5a1c79138bb40e1ff1d168b6242b0e12c4e16449c22ed18e89d224554", 0x8b}], 0x5}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="c3dd68d583aa3750ac64cb8dca60b6d9218b2464b771ad8fac06774fca53991117c34023f159851db7b8e13c99f815b5b18aa8436cc175a073057ed747352566b79b7f3812dd5e4637590c6ed09dfd57a529931f4b0fa2f26718aeb6cae51363dd51c47fed179aaf605405df765bf0072fcc7dd06170d0c5aa85792dd81e9fa7150324db5004", 0x86}, {&(0x7f0000003640)="bab5bb0d69e64640ac5cc7a9b711d7cc5e34e800644203", 0x17}, {&(0x7f0000003680)="f851b06c7119bdb568ac0f295db1219492771d64cb31c8d33f4a03472ac4125dca7666135487fbb9df3e5979c6db9022af25c149a6609758715c89a86f3d9a2d82568d59c81e05b3133cab716ec5e13229dd80e0d399ea21f944796bad7df1d8b53b47db712649213107ffa40f624e2f671a9d24758f3aabb94ac324b3f92825918af4ebebc7", 0x86}, {&(0x7f0000003740)="55d6bdbfcf85162fe1fbca6ddef06af2603fcbbcc028e3b6b0fc927af91c7890d7f15bac14f484a4e37941261f24a4f908ed24ef62f926d0e0c5534bb94e41bf6ab35d2a3b96e816f340b185a2fe8fcc1912d5a4c32560eaa02468bf969d9c50be8e13a02b40f1", 0x67}, {&(0x7f00000037c0)="542ac09db9207ff7078af6315cf886379525552b5a6c8e2c31132b391cc6d6e353d25bc6042734caa44028f9add6d5b79e3675b6c61dfd6d4d57807b35a614666c7fc2c5f23649e451f68f4936eae31e6896a6d0793c95147306b59e066c0b5701ea3f36af7bf3521b4d0c1e7d3b33be8047b7d62f6187f2d91842cd686b9d330061d2f1e19ddbf20b3f146e10a342fdb8bdbf12a1ab9fb59b01f40cec386fc2eafab3da94110f16802cfd451afa3999b183c9f56ef2db111d0ce8", 0xbb}], 0x6, &(0x7f0000003900)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x96}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xd8}}, @mark={{0x14, 0x1, 0x24, 0x1000}}], 0x90}}, {{&(0x7f0000004e80)=@xdp={0x2c, 0xf, r7, 0x1f}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f00)="1f9ddb6eb4391226bafae670157293f20055cd66eb65a51f5696107dc3bf5c6be78482ae6c8ab45f20323fd6ffa4b1ef3ce74c6a92a36bb66c21788664adca11e22c2e8265342f91822a5cb16d68c28b1b26ffb00630ebd08aabdf467147787fc87f03ea88e32589078d98483a636d8b57d48e95eb8f1dedf39730e18a5cc2504a636b713679b55450c37f9c23becbc35bb029485ce052173455b69588e75f6d82f3949128331474240a4fff", 0xac}, {&(0x7f0000004fc0)="6a1cf2ac628c26f289541681c2397a6b05500ea10e16a2aabdd7a6164eb54817e71581b97d9a81592fde646b984f6c48582051accc5e9bfdfd92534ef644e4126eb012057ab244af680ae0e90106f4b557643a0f1267ca7124db", 0x5a}], 0x2, &(0x7f0000005080)=[@txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}, {{&(0x7f00000051c0)=@xdp={0x2c, 0x3, r8, 0x13}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005240)="8fc6e1ebfcd0cc30b9b6f676bc5798574d89e546f67397e0fc96014d877d38e9c7722f926138e1edf616badf0423f9a3af17cdd1a2f65df05116845af11e5a5188124e00d0e3df1afd60e55ab7ef8bfbb29b005126fe58b79877d04103e31ab235d2c0cc630d014b7c146e44d01abd095ec072e7e0c303de90c19c1a8eed39ff975c36fb8a6f931de34cea36ee642adb531764b9fad62bd3affb90e404ff452d3e647b2277bdcffeb4b1c8b734cdb1037ddf258ed1b3008845deac9fb4fad8b2a7adbefb8f63762a041bfcf2f0b80058a3d14efb288eefb0aad85592d57baea7", 0xe0}, {&(0x7f0000005340)="44479c890b8d5c3ef72bf0b6626b2bf8f085eb6d0b7ce061004fbaece32173bcf3b9de6aff60", 0x26}, {&(0x7f0000005380)="af614dda4b764a6499685a8090d9e9364cbbfb4a468a7131b18917039769b779d3ec2b03faaa9f5e14c66c107f79411790718bbc2fca3dcd82a82749c1dbc164a06366d2d1519151eb58c605a304ed7ea3f253f8860a708fe6128d76a48c0f0122", 0x61}, {&(0x7f0000005400)="037f362b3e9986b79fcdd7eee1f4d888cdba709b2f3ca455f5c41653af17d4996d1a50cb8db3a2a7920856393633ea8446700a101c86fd1d5c031111a73d7ab0338f721d308d607abb8c57df06ea15c9ea9361de0c6c3459b7234218380366200bc8ff6ac8eefe7427976f4ae8359d12c754e45376dad29f19b5b83e94db7064fe6f0b3557af67fb3069fb79598972e390b2b5960369711db52bc77bd3fbb56d3a772ebcfcdc0723e74b746e85790a956c5161f9c54e932c99b3a3fdc1e3920619e9e060d1316851acc6ea0471fcab365e10c1d5920d1d92789958e6", 0xdc}], 0x4, &(0x7f0000005540)=[@timestamping={{0x14, 0x1, 0x25, 0x50000000}}, @mark={{0x14, 0x1, 0x24, 0x68000000}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xf0}}, {{&(0x7f0000005640)=@llc={0x1a, 0x336, 0x1, 0x0, 0x0, 0x1f, @multicast}, 0x80, &(0x7f00000066c0)=[{&(0x7f00000056c0)="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", 0x1000}], 0x1, &(0x7f0000006700)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xffffa366}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}], 0x8, 0x100) recvfrom$l2tp6(r3, &(0x7f00000000c0)=""/113, 0x71, 0xc0010000, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 18:47:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x9) [ 583.599301][T21569] FAULT_INJECTION: forcing a failure. [ 583.599301][T21569] name failslab, interval 1, probability 0, space 0, times 0 [ 583.627137][T21578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 583.661322][T21569] CPU: 0 PID: 21569 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 583.671261][T21569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.681354][T21569] Call Trace: [ 583.684665][T21569] dump_stack+0x18f/0x20d [ 583.689012][T21569] should_fail.cold+0x5/0x14 [ 583.693620][T21569] should_failslab+0x5/0xf [ 583.698036][T21569] __kmalloc+0x2d9/0x7a0 [ 583.702287][T21569] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 583.707851][T21569] ? d_absolute_path+0x10c/0x160 [ 583.712790][T21569] ? __d_path+0x140/0x140 [ 583.717130][T21569] tomoyo_encode2.part.0+0xec/0x3b0 [ 583.722342][T21569] tomoyo_encode+0x28/0x50 [ 583.726757][T21569] tomoyo_realpath_from_path+0x184/0x620 [ 583.732395][T21569] tomoyo_check_open_permission+0x26d/0x370 [ 583.738320][T21569] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 583.744144][T21569] ? apparmor_capable+0x533/0x860 [ 583.749187][T21569] ? from_kgid+0x87/0xc0 [ 583.753457][T21569] ? from_kuid_munged+0x130/0x130 [ 583.758511][T21569] ? lock_downgrade+0x840/0x840 [ 583.763368][T21569] ? do_raw_spin_lock+0x120/0x2d0 [ 583.768413][T21569] tomoyo_file_open+0xa3/0xd0 [ 583.773112][T21569] security_file_open+0x6e/0x3d0 [ 583.778067][T21569] do_dentry_open+0x355/0x11a0 [ 583.782854][T21569] path_openat+0x1e9e/0x27d0 [ 583.787466][T21569] ? path_lookupat.isra.0+0x530/0x530 [ 583.792845][T21569] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 583.798832][T21569] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 583.805252][T21569] ? lock_acquire+0x1f2/0x8f0 [ 583.809940][T21569] do_filp_open+0x192/0x260 [ 583.814462][T21569] ? may_open_dev+0xf0/0xf0 [ 583.818981][T21569] ? do_raw_spin_lock+0x120/0x2d0 [ 583.824026][T21569] ? _raw_spin_unlock+0x24/0x40 [ 583.828884][T21569] ? __alloc_fd+0x463/0x600 [ 583.833402][T21569] do_sys_openat2+0x585/0x7a0 [ 583.838084][T21569] ? file_open_root+0x400/0x400 [ 583.842942][T21569] ? __mutex_unlock_slowpath+0xe2/0x660 [ 583.848501][T21569] ? wait_for_completion+0x270/0x270 [ 583.853815][T21569] ? __sb_end_write+0xf8/0x1d0 18:47:21 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) [ 583.858585][T21569] do_sys_open+0xc3/0x140 [ 583.863017][T21569] ? filp_open+0x70/0x70 [ 583.867349][T21569] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 583.872904][T21569] ? do_syscall_64+0x1c/0xe0 [ 583.877500][T21569] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 583.886974][T21569] do_syscall_64+0x60/0xe0 [ 583.891402][T21569] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.897299][T21569] RIP: 0033:0x45ca59 [ 583.901879][T21569] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.902860][T21588] overlayfs: workdir and upperdir must be separate subtrees [ 583.921639][T21569] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 583.921656][T21569] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 583.921662][T21569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 583.921669][T21569] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 18:47:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 583.921675][T21569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 583.921682][T21569] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 18:47:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0xa) 18:47:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @remote}, &(0x7f0000000080)=0x8) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff31}]) r6 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xf8, r8, 0xffff}, 0xf8}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b4, r8, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) finit_module(r4, &(0x7f0000000100)='IPVS\x00', 0x1) 18:47:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 584.109593][T21569] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.129277][ T29] audit: type=1804 audit(1593024442.252:131): pid=21569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/388/file0/bus" dev="loop2" ino=2 res=1 18:47:22 executing program 2 (fault-call:8 fault-nth:7): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:47:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0xc) 18:47:22 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/35) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x8001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000) 18:47:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="0ad6d395189a12feb697c27903cd92f2bb3dec73b0e9ad7dd50116a52996922c9cd3bbf0a6d8a80e42e98a0e1b1475fa57750903c9d4585eb020a1ea00a440bcc92901d90865776fe21b8913c4442ba48554704917db05607b72f735dea99987e0839fa774433763e5c3d633b84e59cbb9550e1b63310b0103d8e629f7b37f51ad585efae5d7cd9c9ad2d08235a75cee28f985134a9f3d0e658c613a5297255c360383d3baa766e06912f18fe6fdd9b853d20b1846344a22bee973167bf9896465843ced5e30355b07f0c3d6c294d1d6c77d05a6a3431974408686ce40eb44d0fc40fa1dbb63", 0xe6}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 584.515605][T21623] FAULT_INJECTION: forcing a failure. [ 584.515605][T21623] name failslab, interval 1, probability 0, space 0, times 0 [ 584.560079][T21623] CPU: 1 PID: 21623 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 584.570031][T21623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.580095][T21623] Call Trace: [ 584.583400][T21623] dump_stack+0x18f/0x20d [ 584.587741][T21623] should_fail.cold+0x5/0x14 [ 584.592341][T21623] should_failslab+0x5/0xf [ 584.596756][T21623] __kmalloc+0x2d9/0x7a0 [ 584.601083][T21623] ? ima_alloc_init_template+0xb4/0x570 [ 584.606644][T21623] ima_alloc_init_template+0xb4/0x570 [ 584.612025][T21623] ima_add_violation+0x109/0x1e0 [ 584.616966][T21623] ? ima_store_template+0x140/0x140 [ 584.622160][T21623] ? d_absolute_path+0x10c/0x160 [ 584.627102][T21623] ? __d_path+0x140/0x140 [ 584.631457][T21623] process_measurement+0x1144/0x1750 [ 584.636758][T21623] ? mmap_violation_check+0x1e0/0x1e0 [ 584.642224][T21623] ? tomoyo_check_open_permission+0x1cc/0x370 [ 584.648325][T21623] ? lock_downgrade+0x840/0x840 [ 584.653217][T21623] ? rcu_read_lock_held_common+0xa0/0xa0 [ 584.658869][T21623] ? check_preemption_disabled+0x38/0x220 [ 584.664598][T21623] ? aa_get_task_label+0x5b8/0x910 [ 584.669716][T21623] ? aa_capable+0xc20/0xc20 [ 584.674414][T21623] ? apparmor_task_getsecid+0xc2/0x110 [ 584.679963][T21623] ima_file_check+0xb9/0x100 [ 584.684556][T21623] ? process_measurement+0x1750/0x1750 [ 584.690022][T21623] path_openat+0x17a4/0x27d0 [ 584.694629][T21623] ? path_lookupat.isra.0+0x530/0x530 [ 584.700004][T21623] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 584.705994][T21623] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 584.711993][T21623] do_filp_open+0x192/0x260 [ 584.716507][T21623] ? may_open_dev+0xf0/0xf0 [ 584.721028][T21623] ? do_raw_spin_lock+0x120/0x2d0 [ 584.726083][T21623] ? _raw_spin_unlock+0x24/0x40 [ 584.731022][T21623] ? __alloc_fd+0x463/0x600 [ 584.735652][T21623] do_sys_openat2+0x585/0x7a0 [ 584.740337][T21623] ? file_open_root+0x400/0x400 [ 584.745197][T21623] ? __mutex_unlock_slowpath+0xe2/0x660 [ 584.750763][T21623] ? wait_for_completion+0x270/0x270 [ 584.756155][T21623] ? __sb_end_write+0xf8/0x1d0 [ 584.761199][T21623] do_sys_open+0xc3/0x140 [ 584.765542][T21623] ? filp_open+0x70/0x70 [ 584.769790][T21623] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 584.775352][T21623] ? do_syscall_64+0x1c/0xe0 [ 584.780400][T21623] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 584.786394][T21623] do_syscall_64+0x60/0xe0 [ 584.790932][T21623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 584.797570][T21623] RIP: 0033:0x45ca59 [ 584.801470][T21623] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 584.821394][T21623] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 584.829892][T21623] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 584.837843][T21623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 584.845800][T21623] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 584.853799][T21623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 18:47:23 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)) 18:47:23 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0xe) 18:47:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "8a040060e80800000000477fdd350000001e00"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000080)='./file0\x00', 0x201, 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r0, 0x541d) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = add_key(0x0, 0x0, &(0x7f00000000c0)='r', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r3) keyctl$search(0xa, 0x0, 0x0, 0x0, r3) keyctl$invalidate(0x15, r3) r4 = dup(r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @descriptor="356da48c79af7dae"}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 584.861758][T21623] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 584.904535][ T29] audit: type=1804 audit(1593024443.032:132): pid=21623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir835282963/syzkaller.bmw8qd/389/file0/bus" dev="loop2" ino=2 res=0 18:47:23 executing program 2 (fault-call:8 fault-nth:8): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00'}, 0x45c) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 585.041169][T21643] overlayfs: missing 'lowerdir' [ 585.056266][T21645] overlayfs: missing 'lowerdir' [ 585.190117][T21649] FAULT_INJECTION: forcing a failure. [ 585.190117][T21649] name failslab, interval 1, probability 0, space 0, times 0 [ 585.209591][T21649] CPU: 1 PID: 21649 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 585.219491][T21649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.229543][T21649] Call Trace: [ 585.232839][T21649] dump_stack+0x18f/0x20d [ 585.237190][T21649] should_fail.cold+0x5/0x14 [ 585.241794][T21649] should_failslab+0x5/0xf [ 585.246214][T21649] __kmalloc+0x2d9/0x7a0 [ 585.250462][T21649] ? ima_alloc_init_template+0x19b/0x570 [ 585.256106][T21649] ima_alloc_init_template+0x19b/0x570 [ 585.261620][T21649] ima_add_violation+0x109/0x1e0 [ 585.266558][T21649] ? ima_store_template+0x140/0x140 [ 585.271753][T21649] ? d_absolute_path+0x10c/0x160 [ 585.276714][T21649] process_measurement+0x1144/0x1750 [ 585.282013][T21649] ? mmap_violation_check+0x1e0/0x1e0 [ 585.287388][T21649] ? tomoyo_check_open_permission+0x1cc/0x370 [ 585.293474][T21649] ? lock_downgrade+0x840/0x840 [ 585.298336][T21649] ? rcu_read_lock_held_common+0xa0/0xa0 [ 585.303972][T21649] ? check_preemption_disabled+0x38/0x220 [ 585.309699][T21649] ? aa_get_task_label+0x5b8/0x910 [ 585.314810][T21649] ? aa_capable+0xc20/0xc20 [ 585.319327][T21649] ? apparmor_task_getsecid+0xc2/0x110 [ 585.324794][T21649] ima_file_check+0xb9/0x100 [ 585.329387][T21649] ? process_measurement+0x1750/0x1750 [ 585.334861][T21649] path_openat+0x17a4/0x27d0 18:47:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x4000000080002, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto(r4, &(0x7f0000000100)="9eeac7690500b85b83a4b2a8974ca5e11698a5b9a26ca2451ceb3f30fa9b5d9b1af41b1b9e96c67bcf5a6d575fe7ad79d6dfa2a539d530054185c2d7b0620a489be8742af1599f3c8c11336fd63b70744062a1b73443ff8f287149e71b97f3b9776505ed49616de4045200f74b9b708a1b4beb9d8a952a356c80802124780932330c8e154a031c5471c87fef864fb740ca133b43409d35a11de871368a97f1331913258d8cf0d91c9888cfac", 0xac, 0x8008001, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x80) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="857e00001d0000000a000f000000"], 0x14}}, 0x4) 18:47:23 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0xf) 18:47:23 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x3a940) 18:47:23 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_ROPEN(r4, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x1, 0x1, 0x3}, 0x8}}, 0x18) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6c6f7765726469723d2e2f66698365302c72656469726563745f6469723d2e2f66696c65302f2e2e2f66696c65302c00daab9ba8df25bdbd126c60fd66086b8069e1e1446255511675418b057d609aeda9797e02e009190aa0997af5c0fe76d3457cd931ec09778de7b864c41fe1ad96e28c91ab865618477037d017a9b90eaf6fed307a500a3b22a8eb30db481a7f6bc5fd0593d63af4f72c2b415f1029ecc81a6e791fe6e88ecc8ce2594d8a99479623cea5d566bc78776baaf80bb36a25d59f3fe633c84365aa322cbec1e31b1d7a8b3aa2fe14acce7ef338638fc9b620972a89830600e1c363"]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = accept$netrom(r6, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xec, 0x8001}) 18:47:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) [ 585.339465][T21649] ? path_lookupat.isra.0+0x530/0x530 [ 585.344838][T21649] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 585.350868][T21649] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 585.356947][T21649] do_filp_open+0x192/0x260 [ 585.361453][T21649] ? may_open_dev+0xf0/0xf0 [ 585.365981][T21649] ? do_raw_spin_lock+0x120/0x2d0 [ 585.371052][T21649] ? _raw_spin_unlock+0x24/0x40 [ 585.375900][T21649] ? __alloc_fd+0x463/0x600 [ 585.380411][T21649] do_sys_openat2+0x585/0x7a0 [ 585.385071][T21649] ? file_open_root+0x400/0x400 [ 585.389908][T21649] ? __mutex_unlock_slowpath+0xe2/0x660 [ 585.395456][T21649] ? wait_for_completion+0x270/0x270 [ 585.400917][T21649] ? __sb_end_write+0xf8/0x1d0 [ 585.405682][T21649] do_sys_open+0xc3/0x140 [ 585.410017][T21649] ? filp_open+0x70/0x70 [ 585.414255][T21649] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 585.419783][T21649] ? do_syscall_64+0x1c/0xe0 [ 585.424354][T21649] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 585.430332][T21649] do_syscall_64+0x60/0xe0 [ 585.434746][T21649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.440642][T21649] RIP: 0033:0x45ca59 [ 585.444516][T21649] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.464101][T21649] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 585.472495][T21649] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 585.480456][T21649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 585.488431][T21649] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 585.496401][T21649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 585.504372][T21649] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 585.517540][T21649] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 585.530925][T21649] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 585.539339][T21649] CPU: 1 PID: 21649 Comm: syz-executor.2 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 585.549259][T21649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.559328][T21649] RIP: 0010:ima_free_template_entry+0x4a/0x170 [ 585.565456][T21649] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 25 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 10 48 8d 7b 20 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d1 00 00 00 8b 5b 20 31 ff 89 [ 585.585039][T21649] RSP: 0018:ffffc90008f9f598 EFLAGS: 00010202 [ 585.591087][T21649] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000eacf000 [ 585.599039][T21649] RDX: 0000000000000004 RSI: ffffffff836d8716 RDI: 0000000000000020 [ 585.607003][T21649] RBP: ffff8880977a4800 R08: 0000000000000000 R09: ffffed1015ce719c [ 585.614948][T21649] R10: ffff8880ae738cdb R11: ffffed1015ce719b R12: ffffc90008f9f670 [ 585.622893][T21649] R13: ffffffff8a06d650 R14: ffff8880977a4810 R15: 00000000fffffff4 [ 585.630849][T21649] FS: 00007fd4b18cb700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 585.639751][T21649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.646309][T21649] CR2: 0000001b33225000 CR3: 0000000055395000 CR4: 00000000001406e0 [ 585.654259][T21649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.662228][T21649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.670190][T21649] Call Trace: [ 585.673467][T21649] ima_alloc_init_template+0x3de/0x570 [ 585.678903][T21649] ima_add_violation+0x109/0x1e0 [ 585.683815][T21649] ? ima_store_template+0x140/0x140 [ 585.688988][T21649] ? d_absolute_path+0x10c/0x160 [ 585.693920][T21649] process_measurement+0x1144/0x1750 [ 585.699191][T21649] ? mmap_violation_check+0x1e0/0x1e0 [ 585.704555][T21649] ? tomoyo_check_open_permission+0x1cc/0x370 [ 585.710615][T21649] ? lock_downgrade+0x840/0x840 [ 585.715453][T21649] ? rcu_read_lock_held_common+0xa0/0xa0 [ 585.721075][T21649] ? check_preemption_disabled+0x38/0x220 [ 585.726780][T21649] ? aa_get_task_label+0x5b8/0x910 [ 585.731869][T21649] ? aa_capable+0xc20/0xc20 [ 585.736353][T21649] ? apparmor_task_getsecid+0xc2/0x110 [ 585.741788][T21649] ima_file_check+0xb9/0x100 [ 585.746357][T21649] ? process_measurement+0x1750/0x1750 [ 585.751795][T21649] path_openat+0x17a4/0x27d0 [ 585.756394][T21649] ? path_lookupat.isra.0+0x530/0x530 [ 585.761742][T21649] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 585.767695][T21649] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 585.773655][T21649] do_filp_open+0x192/0x260 [ 585.778133][T21649] ? may_open_dev+0xf0/0xf0 [ 585.782646][T21649] ? do_raw_spin_lock+0x120/0x2d0 [ 585.787656][T21649] ? _raw_spin_unlock+0x24/0x40 [ 585.792497][T21649] ? __alloc_fd+0x463/0x600 [ 585.796994][T21649] do_sys_openat2+0x585/0x7a0 [ 585.801649][T21649] ? file_open_root+0x400/0x400 [ 585.806476][T21649] ? __mutex_unlock_slowpath+0xe2/0x660 [ 585.811999][T21649] ? wait_for_completion+0x270/0x270 [ 585.817259][T21649] ? __sb_end_write+0xf8/0x1d0 [ 585.822018][T21649] do_sys_open+0xc3/0x140 [ 585.826338][T21649] ? filp_open+0x70/0x70 [ 585.830559][T21649] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 585.836082][T21649] ? do_syscall_64+0x1c/0xe0 [ 585.840648][T21649] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 585.846603][T21649] do_syscall_64+0x60/0xe0 [ 585.851016][T21649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.856883][T21649] RIP: 0033:0x45ca59 [ 585.860751][T21649] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.880351][T21649] RSP: 002b:00007fd4b18cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 585.888745][T21649] RAX: ffffffffffffffda RBX: 00000000004f7980 RCX: 000000000045ca59 [ 585.896692][T21649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 585.904661][T21649] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 585.912616][T21649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 585.920561][T21649] R13: 0000000000000798 R14: 000000000052685f R15: 00007fd4b18cb6d4 [ 585.928510][T21649] Modules linked in: [ 585.934550][T21649] ---[ end trace 209e694799198761 ]--- [ 585.940023][T21649] RIP: 0010:ima_free_template_entry+0x4a/0x170 [ 585.946628][T21649] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 25 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 10 48 8d 7b 20 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d1 00 00 00 8b 5b 20 31 ff 89 18:47:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x11, 0x400000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x8, 0x40, 0x401}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 18:47:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIOCLEX(r1, 0x5451) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$tipc(r1, 0x0, 0x0, 0x0) 18:47:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x10) [ 585.997126][T21663] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 586.004926][T21649] RSP: 0018:ffffc90008f9f598 EFLAGS: 00010202 [ 586.019589][T21663] overlayfs: bad mount option "redirect_dir=./file0/../file0" [ 586.020141][T21649] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000eacf000 [ 586.035630][T21666] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 18:47:24 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) sendto(r2, &(0x7f00000000c0)="c4ce009c0b350db439452dcce8a364c07bc4ee14db10ec1ae98d9ab92c817d78df4925a8b2ad95f4af7c45ffd9731618af21169a235183cdfdf57b69e1f0bb82b18e645601a585ad91ff6295e85df7ea09d52bbdc7ffefa8f3e230e43031af54d1c77f336430fe3af970b560bd8eab5295880cd999f2b24e77c6ae", 0x7b, 0x4000040, &(0x7f0000000200)=@in6={0xa, 0x4e24, 0x6, @empty, 0x100}, 0x80) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="64656661756c1b937931e491d443545a9eed745f7065726d697373696f6e732c6c6f7765726469723d2e2f66d07b5203fc83f8e46b6469723d2e2f66696c65302f2e44597b59f6532554c30ed4352e2f66696c65302c00cf9606eaeb66099182993432a6375e35dc0d0fdec83b5478e6880f17383f38c3a4d728147bfdaecf1b9754aba4131b91e89774650a613143e1497cb0b9fc16215f9f46ce7b486d21d11a58fd7c97d7966c7f4ee5f80ba97d735ace9897b042e11e30691e3ea3b2f50d35200a4e4a2d1c473544aaf58ac7494ba297d45391f5a7e17a611ac1520c0b20a55339d2dfbb7e9c14bd5a1e4e87ad8b0eaf749873809504f4cda87f7663c76801835cbf217db4cc5682641211c690bf92fbf4e234001bc6a266871e"]) [ 586.045161][T21666] overlayfs: bad mount option "redirect_dir=./file0/../file0" [ 586.048040][T21649] RDX: 0000000000000004 RSI: ffffffff836d8716 RDI: 0000000000000020 [ 586.071274][T21649] RBP: ffff8880977a4800 R08: 0000000000000000 R09: ffffed1015ce719c [ 586.084910][T21649] R10: ffff8880ae738cdb R11: ffffed1015ce719b R12: ffffc90008f9f670 18:47:24 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x200080) [ 586.104808][T21649] R13: ffffffff8a06d650 R14: ffff8880977a4810 R15: 00000000fffffff4 [ 586.136388][T21649] FS: 00007fd4b18cb700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 18:47:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000040)={0x9a0000, 0x400, 0x7, r1, 0x0, &(0x7f0000000000)={0xa10904, 0x2, [], @ptr=0x1}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000140)=""/102400) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000019140)="223613cc2b322c150d0e2551885df672377a3aaf4758a0e6b42af6cbdc31f5f76f564781b9d05de1dda725449bec363ce57500eab0191e46cadf4dce40a98b4ceb7a3949eac3d330e3cab377b18e454f4916acf2f66a875503a39c47157c1627b8efe354c8c047cd67e75d50d85ef82745593f0142cd5af9548d84f9108e22f6e4efc8f1d88febbcd537bcf03a0dfa820f8042ac2a81f8da8dc2476ae2317afe993d264d520e5ba62e569fa21da42c7c53eeec27de8803617e294cc215db307c0188c7bfe89193183f5c986fe56209521a5181", 0xd3) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x2) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000080)={0x57, 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000019240)={{0x2c, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e23, 0x3, 'nq\x00', 0x0, 0x2, 0x48}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x2, 0x7, 0x0, 0x4}}, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4$tipc(r5, 0x0, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 586.149225][T21649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.164835][T21649] CR2: 00007ffe360f4608 CR3: 0000000055395000 CR4: 00000000001406e0 [ 586.173188][T21649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 586.185960][T21649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 586.202778][T21649] Kernel panic - not syncing: Fatal exception [ 586.209985][T21649] Kernel Offset: disabled [ 586.214297][T21649] Rebooting in 86400 seconds..