180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:41 executing program 2: socket$pppoe(0x18, 0x1, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e0a) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x7f, 0x2) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000240)=0x80) sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="f99b4a369fc6181911b00e68e0f2804c02f6", 0x12}], 0x2}, 0x4080010) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b", 0x4d}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) fchown(r5, 0xee01, r6) close(r1) syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x40, 0x20000) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r4, r4, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f8, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x747, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f64711", @generic="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"]}]}, 0x7f8}], 0x1}, 0x0) [ 582.445998][T21789] overlayfs: failed to resolve './file': -2 [ 582.492668][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 582.492683][ T27] audit: type=1804 audit(1581974201.957:930): pid=21789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/557/bus/file0" dev="sda1" ino=16533 res=1 21:16:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 582.798591][T21798] overlayfs: failed to resolve './file': -2 21:16:42 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 582.853841][ T27] audit: type=1804 audit(1581974202.327:931): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/558/bus/file0" dev="sda1" ino=16546 res=1 21:16:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 583.175605][T21805] overlayfs: failed to resolve './file': -2 [ 583.186255][ T27] audit: type=1804 audit(1581974202.657:932): pid=21805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/559/bus/file0" dev="sda1" ino=16546 res=1 21:16:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:42 executing program 2: socket$pppoe(0x18, 0x1, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e0a) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x7f, 0x2) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000240)=0x80) sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="f99b4a369fc6181911b00e68e0f2804c02f6", 0x12}], 0x2}, 0x4080010) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b", 0x4d}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) fchown(r5, 0xee01, r6) close(r1) syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x40, 0x20000) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r4, r4, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x74d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093f", @generic="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"]}]}, 0x800}], 0x1}, 0x0) 21:16:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:43 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:44 executing program 2: socket$pppoe(0x18, 0x1, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e0a) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x7f, 0x2) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000240)=0x80) sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="f99b4a369fc6181911b00e68e0f2804c02f6", 0x12}], 0x2}, 0x4080010) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b", 0x4d}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) fchown(r5, 0xee01, r6) close(r1) syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x40, 0x20000) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r4, r4, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x74d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093f", @generic="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"]}]}, 0x800}], 0x1}, 0x0) 21:16:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:44 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) 21:16:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:45 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) 21:16:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x74d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093f", @generic="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"]}]}, 0x800}], 0x1}, 0x0) 21:16:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) 21:16:45 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) 21:16:45 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) 21:16:45 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:46 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) 21:16:46 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000300)=""/131, 0x83, &(0x7f00000003c0)=""/171, 0x1, 0x1}}, 0x48) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)={r10}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r10, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x83d, r10}, &(0x7f0000000480)=0x10) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r11 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x18) 21:16:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x750, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c0", @generic="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"]}]}, 0x800}], 0x1}, 0x0) 21:16:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:46 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 21:16:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:47 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 21:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000300)=""/131, 0x83, &(0x7f00000003c0)=""/171, 0x1, 0x1}}, 0x48) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)={r10}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r10, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x83d, r10}, &(0x7f0000000480)=0x10) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r11 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x18) 21:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:47 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x750, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c0", @generic="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"]}]}, 0x800}], 0x1}, 0x0) 21:16:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:48 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') 21:16:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:48 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000300)=""/131, 0x83, &(0x7f00000003c0)=""/171, 0x1, 0x1}}, 0x48) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)={r10}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r10, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x83d, r10}, &(0x7f0000000480)=0x10) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r11 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x18) 21:16:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x750, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c0", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x800}], 0x1}, 0x0) 21:16:49 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 589.901799][T22040] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:16:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 589.971567][T22040] FAT-fs (loop1): Filesystem has been set read-only [ 589.993070][T22040] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:16:49 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, 0x0, 0x0) 21:16:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 590.527519][T22071] overlayfs: failed to resolve './file0': -2 21:16:50 executing program 3 (fault-call:10 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, 0x0, 0x0) 21:16:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:50 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x752, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:16:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, 0x0, 0x0) [ 590.826486][T22080] overlayfs: failed to resolve './file0': -2 21:16:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 21:16:50 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 591.129573][T22096] overlayfs: failed to resolve './file0': -2 21:16:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 591.177897][T22093] FAULT_INJECTION: forcing a failure. [ 591.177897][T22093] name failslab, interval 1, probability 0, space 0, times 0 [ 591.245486][T22093] CPU: 0 PID: 22093 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 591.254203][T22093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.264395][T22093] Call Trace: [ 591.267703][T22093] dump_stack+0x197/0x210 [ 591.272060][T22093] should_fail.cold+0x5/0xd [ 591.276711][T22093] ? fault_create_debugfs_attr+0x140/0x140 [ 591.282553][T22093] ? ___might_sleep+0x163/0x2c0 [ 591.287426][T22093] __should_failslab+0xb7/0x100 [ 591.292297][T22093] should_failslab+0x9/0x14 [ 591.296810][T22093] kmem_cache_alloc+0x2aa/0x710 [ 591.301691][T22093] getname_flags+0xd6/0x5b0 [ 591.306209][T22093] getname+0x1a/0x20 [ 591.310108][T22093] do_sys_openat2+0x45c/0x7e0 [ 591.314802][T22093] ? file_open_root+0x430/0x430 [ 591.319682][T22093] do_sys_open+0xf2/0x180 [ 591.324020][T22093] ? filp_open+0x80/0x80 [ 591.328278][T22093] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.333746][T22093] ? do_syscall_64+0x26/0x790 [ 591.338695][T22093] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.344766][T22093] ? do_syscall_64+0x26/0x790 [ 591.349463][T22093] __x64_sys_open+0x7e/0xc0 [ 591.353982][T22093] do_syscall_64+0xfa/0x790 [ 591.358503][T22093] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.364506][T22093] RIP: 0033:0x45c6c9 [ 591.368409][T22093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:16:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 591.388020][T22093] RSP: 002b:00007f7d8213cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 591.396547][T22093] RAX: ffffffffffffffda RBX: 00007f7d8213d6d4 RCX: 000000000045c6c9 [ 591.404528][T22093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 591.412508][T22093] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 591.420488][T22093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 591.428479][T22093] R13: 0000000000000772 R14: 000000000050335f R15: 0000000000000000 21:16:51 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:51 executing program 3 (fault-call:10 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 21:16:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x752, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:16:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 21:16:51 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 591.968269][T22116] FAULT_INJECTION: forcing a failure. [ 591.968269][T22116] name failslab, interval 1, probability 0, space 0, times 0 [ 592.022547][T22116] CPU: 1 PID: 22116 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 592.031258][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.041327][T22116] Call Trace: [ 592.044640][T22116] dump_stack+0x197/0x210 [ 592.049000][T22116] should_fail.cold+0x5/0xd [ 592.053531][T22116] ? fault_create_debugfs_attr+0x140/0x140 [ 592.059352][T22116] ? ___might_sleep+0x163/0x2c0 [ 592.064221][T22116] __should_failslab+0xb7/0x100 [ 592.069131][T22116] should_failslab+0x9/0x14 [ 592.073637][T22116] kmem_cache_alloc+0x2aa/0x710 [ 592.078492][T22116] ? stack_trace_save+0x8f/0xc0 [ 592.083357][T22116] ? stack_trace_consume_entry+0x170/0x170 [ 592.089169][T22116] __alloc_file+0x27/0x340 [ 592.093579][T22116] alloc_empty_file+0x72/0x170 [ 592.098352][T22116] path_openat+0xef/0x3490 [ 592.102761][T22116] ? do_sys_openat2+0x45c/0x7e0 [ 592.107623][T22116] ? do_sys_open+0xf2/0x180 [ 592.112119][T22116] ? __kasan_check_read+0x11/0x20 [ 592.117142][T22116] ? mark_lock+0xc2/0x1220 [ 592.121558][T22116] ? __kasan_check_read+0x11/0x20 [ 592.126580][T22116] ? path_mountpoint.isra.0+0x370/0x370 [ 592.132124][T22116] ? __alloc_fd+0x487/0x620 [ 592.136635][T22116] do_filp_open+0x192/0x260 [ 592.141139][T22116] ? may_open_dev+0x100/0x100 [ 592.145819][T22116] ? lock_downgrade+0x920/0x920 [ 592.150680][T22116] ? rwlock_bug.part.0+0x90/0x90 [ 592.155627][T22116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.161862][T22116] ? do_raw_spin_unlock+0x181/0x270 [ 592.167062][T22116] ? _raw_spin_unlock+0x28/0x40 [ 592.171932][T22116] do_sys_openat2+0x5eb/0x7e0 [ 592.176606][T22116] ? file_open_root+0x430/0x430 [ 592.181459][T22116] do_sys_open+0xf2/0x180 [ 592.185795][T22116] ? filp_open+0x80/0x80 [ 592.190028][T22116] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.195481][T22116] ? do_syscall_64+0x26/0x790 [ 592.200154][T22116] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.206293][T22116] ? do_syscall_64+0x26/0x790 [ 592.210974][T22116] __x64_sys_open+0x7e/0xc0 [ 592.215518][T22116] do_syscall_64+0xfa/0x790 [ 592.220018][T22116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.225893][T22116] RIP: 0033:0x45c6c9 [ 592.229787][T22116] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.249627][T22116] RSP: 002b:00007f7d8213cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 592.258032][T22116] RAX: ffffffffffffffda RBX: 00007f7d8213d6d4 RCX: 000000000045c6c9 [ 592.265999][T22116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 21:16:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 592.273961][T22116] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 592.281915][T22116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 592.289887][T22116] R13: 0000000000000772 R14: 000000000050335f R15: 0000000000000001 21:16:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 21:16:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:16:52 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x752, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:16:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:52 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 593.097603][T22166] overlayfs: failed to resolve './file1': -2 21:16:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:52 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 593.448001][T22183] FAULT_INJECTION: forcing a failure. [ 593.448001][T22183] name failslab, interval 1, probability 0, space 0, times 0 [ 593.488609][T22181] overlayfs: failed to resolve './file1': -2 [ 593.513026][T22183] CPU: 0 PID: 22183 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 593.521733][T22183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.531901][T22183] Call Trace: [ 593.535215][T22183] dump_stack+0x197/0x210 [ 593.539579][T22183] should_fail.cold+0x5/0xd [ 593.544112][T22183] ? fault_create_debugfs_attr+0x140/0x140 [ 593.550081][T22183] ? ___might_sleep+0x163/0x2c0 [ 593.554958][T22183] __should_failslab+0xb7/0x100 [ 593.559823][T22183] should_failslab+0x9/0x14 [ 593.564340][T22183] kmem_cache_alloc_node+0x268/0x740 [ 593.569661][T22183] __alloc_skb+0xd5/0x5e0 [ 593.574015][T22183] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 593.579652][T22183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.585920][T22183] ? netlink_autobind.isra.0+0x22c/0x310 [ 593.591573][T22183] netlink_sendmsg+0xa1b/0xea0 [ 593.596476][T22183] ? netlink_unicast+0x7e0/0x7e0 [ 593.601427][T22183] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 593.606986][T22183] ? apparmor_socket_sendmsg+0x2a/0x30 [ 593.612456][T22183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.618711][T22183] ? security_socket_sendmsg+0x8d/0xc0 [ 593.624205][T22183] ? netlink_unicast+0x7e0/0x7e0 [ 593.629179][T22183] sock_sendmsg+0xd7/0x130 [ 593.633621][T22183] ____sys_sendmsg+0x753/0x880 [ 593.638403][T22183] ? kernel_sendmsg+0x50/0x50 [ 593.643095][T22183] ? __fget_files+0x337/0x520 [ 593.647876][T22183] ? find_held_lock+0x35/0x130 [ 593.652685][T22183] ___sys_sendmsg+0x100/0x170 [ 593.657378][T22183] ? sendmsg_copy_msghdr+0x70/0x70 [ 593.662504][T22183] ? __kasan_check_read+0x11/0x20 [ 593.667548][T22183] ? __fget_files+0x359/0x520 [ 593.672247][T22183] ? ksys_dup3+0x3e0/0x3e0 [ 593.676694][T22183] ? __fget_light+0x1ad/0x270 [ 593.681386][T22183] ? __fdget+0x1b/0x20 [ 593.685901][T22183] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.692264][T22183] __sys_sendmsg+0x105/0x1d0 [ 593.696872][T22183] ? __sys_sendmsg_sock+0xc0/0xc0 [ 593.702047][T22183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 593.707519][T22183] ? do_syscall_64+0x26/0x790 [ 593.712231][T22183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.718303][T22183] ? do_syscall_64+0x26/0x790 [ 593.723006][T22183] __x64_sys_sendmsg+0x78/0xb0 [ 593.727805][T22183] do_syscall_64+0xfa/0x790 [ 593.732325][T22183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.738220][T22183] RIP: 0033:0x45c6c9 [ 593.742123][T22183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.761863][T22183] RSP: 002b:00007f8827779c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.770432][T22183] RAX: ffffffffffffffda RBX: 00007f882777a6d4 RCX: 000000000045c6c9 [ 593.778418][T22183] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 21:16:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 593.786403][T22183] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 593.794385][T22183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 593.802372][T22183] R13: 00000000000009cd R14: 00000000004cc71c R15: 0000000000000000 21:16:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 593.886285][T22185] overlayfs: failed to resolve './file1': -2 21:16:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 21:16:53 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7fc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x74b, 0x0, 0x0, 0x1, [@generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7fc}], 0x1}, 0x0) [ 594.146140][T22192] FAULT_INJECTION: forcing a failure. [ 594.146140][T22192] name failslab, interval 1, probability 0, space 0, times 0 [ 594.192184][T22192] CPU: 1 PID: 22192 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 594.200895][T22192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.210970][T22192] Call Trace: [ 594.214282][T22192] dump_stack+0x197/0x210 [ 594.218648][T22192] should_fail.cold+0x5/0xd [ 594.223177][T22192] ? fault_create_debugfs_attr+0x140/0x140 [ 594.229174][T22192] ? ___might_sleep+0x163/0x2c0 [ 594.234050][T22192] __should_failslab+0xb7/0x100 [ 594.238946][T22192] should_failslab+0x9/0x14 [ 594.243459][T22192] kmem_cache_alloc_node_trace+0x274/0x750 [ 594.249279][T22192] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 594.255271][T22192] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 594.261132][T22192] __kmalloc_node_track_caller+0x3d/0x70 [ 594.266952][T22192] __kmalloc_reserve.isra.0+0x40/0xf0 [ 594.272444][T22192] __alloc_skb+0x10b/0x5e0 [ 594.276876][T22192] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 594.282446][T22192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.288782][T22192] ? netlink_autobind.isra.0+0x22c/0x310 [ 594.294463][T22192] netlink_sendmsg+0xa1b/0xea0 [ 594.299246][T22192] ? netlink_unicast+0x7e0/0x7e0 [ 594.304212][T22192] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 594.309774][T22192] ? apparmor_socket_sendmsg+0x2a/0x30 [ 594.315242][T22192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.321489][T22192] ? security_socket_sendmsg+0x8d/0xc0 [ 594.326955][T22192] ? netlink_unicast+0x7e0/0x7e0 [ 594.331913][T22192] sock_sendmsg+0xd7/0x130 [ 594.336341][T22192] ____sys_sendmsg+0x753/0x880 [ 594.341122][T22192] ? kernel_sendmsg+0x50/0x50 [ 594.345816][T22192] ? __fget_files+0x337/0x520 [ 594.350497][T22192] ? find_held_lock+0x35/0x130 [ 594.355294][T22192] ___sys_sendmsg+0x100/0x170 [ 594.360015][T22192] ? sendmsg_copy_msghdr+0x70/0x70 [ 594.365135][T22192] ? __kasan_check_read+0x11/0x20 [ 594.370177][T22192] ? __fget_files+0x359/0x520 [ 594.374969][T22192] ? ksys_dup3+0x3e0/0x3e0 [ 594.379411][T22192] ? __fget_light+0x1ad/0x270 [ 594.384126][T22192] ? __fdget+0x1b/0x20 21:16:53 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 594.388200][T22192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 594.394470][T22192] __sys_sendmsg+0x105/0x1d0 [ 594.399078][T22192] ? __sys_sendmsg_sock+0xc0/0xc0 [ 594.404135][T22192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 594.409602][T22192] ? do_syscall_64+0x26/0x790 [ 594.414285][T22192] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.420352][T22192] ? do_syscall_64+0x26/0x790 [ 594.425043][T22192] __x64_sys_sendmsg+0x78/0xb0 [ 594.429826][T22192] do_syscall_64+0xfa/0x790 [ 594.434347][T22192] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.440263][T22192] RIP: 0033:0x45c6c9 [ 594.444164][T22192] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.463763][T22192] RSP: 002b:00007f8827779c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.472171][T22192] RAX: ffffffffffffffda RBX: 00007f882777a6d4 RCX: 000000000045c6c9 [ 594.480141][T22192] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 594.488172][T22192] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 594.496151][T22192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 594.504125][T22192] R13: 00000000000009cd R14: 00000000004cc71c R15: 0000000000000001 21:16:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3, 0x0) 21:16:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 594.659884][T22202] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 594.672922][T22202] FAT-fs (loop1): Filesystem has been set read-only [ 594.684071][T22202] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:16:54 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:54 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 594.876499][T22210] FAULT_INJECTION: forcing a failure. [ 594.876499][T22210] name failslab, interval 1, probability 0, space 0, times 0 [ 594.953899][T22210] CPU: 0 PID: 22210 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 594.962614][T22210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.972667][T22210] Call Trace: [ 594.975978][T22210] dump_stack+0x197/0x210 [ 594.980343][T22210] should_fail.cold+0x5/0xd [ 594.984870][T22210] ? fault_create_debugfs_attr+0x140/0x140 [ 594.990701][T22210] ? ___might_sleep+0x163/0x2c0 [ 594.995568][T22210] __should_failslab+0xb7/0x100 [ 595.000462][T22210] should_failslab+0x9/0x14 [ 595.004978][T22210] kmem_cache_alloc_node+0x268/0x740 [ 595.010338][T22210] ? crypto_user_rcv_msg+0x41a/0x540 [ 595.015645][T22210] __alloc_skb+0xd5/0x5e0 [ 595.019988][T22210] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 595.025568][T22210] netlink_ack+0x25c/0xb50 [ 595.030877][T22210] ? netlink_sendmsg+0xea0/0xea0 [ 595.035845][T22210] ? crypto_netlink_rcv+0x1c/0x40 [ 595.040892][T22210] netlink_rcv_skb+0x376/0x450 [ 595.045669][T22210] ? crypto_dump_report+0x350/0x350 [ 595.050884][T22210] ? netlink_ack+0xb50/0xb50 [ 595.055487][T22210] ? __kasan_check_read+0x11/0x20 [ 595.060532][T22210] ? netlink_deliver_tap+0x248/0xbf0 [ 595.065835][T22210] crypto_netlink_rcv+0x2b/0x40 [ 595.070689][T22210] netlink_unicast+0x59e/0x7e0 [ 595.075467][T22210] ? netlink_attachskb+0x870/0x870 [ 595.080586][T22210] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 595.086311][T22210] ? __check_object_size+0x3d/0x437 [ 595.091527][T22210] netlink_sendmsg+0x91c/0xea0 [ 595.096313][T22210] ? netlink_unicast+0x7e0/0x7e0 [ 595.101250][T22210] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 595.104444][T22216] overlayfs: './file0' not a directory [ 595.106803][T22210] ? apparmor_socket_sendmsg+0x2a/0x30 [ 595.117727][T22210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.123977][T22210] ? security_socket_sendmsg+0x8d/0xc0 [ 595.124116][ T27] audit: type=1804 audit(1581974214.427:933): pid=22219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/576/bus/bus/file0" dev="overlay" ino=16591 res=1 [ 595.129433][T22210] ? netlink_unicast+0x7e0/0x7e0 [ 595.129452][T22210] sock_sendmsg+0xd7/0x130 [ 595.129475][T22210] ____sys_sendmsg+0x753/0x880 [ 595.169165][T22210] ? kernel_sendmsg+0x50/0x50 [ 595.173851][T22210] ? __fget_files+0x337/0x520 [ 595.178531][T22210] ? find_held_lock+0x35/0x130 [ 595.183331][T22210] ___sys_sendmsg+0x100/0x170 [ 595.188024][T22210] ? sendmsg_copy_msghdr+0x70/0x70 [ 595.193141][T22210] ? __kasan_check_read+0x11/0x20 [ 595.198177][T22210] ? __fget_files+0x359/0x520 [ 595.202875][T22210] ? ksys_dup3+0x3e0/0x3e0 [ 595.207315][T22210] ? __fget_light+0x1ad/0x270 [ 595.211998][T22210] ? __fdget+0x1b/0x20 [ 595.216070][T22210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 595.222321][T22210] __sys_sendmsg+0x105/0x1d0 [ 595.226915][T22210] ? __sys_sendmsg_sock+0xc0/0xc0 [ 595.231986][T22210] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 595.237445][T22210] ? do_syscall_64+0x26/0x790 [ 595.242120][T22210] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.248185][T22210] ? do_syscall_64+0x26/0x790 [ 595.252882][T22210] __x64_sys_sendmsg+0x78/0xb0 [ 595.257654][T22210] do_syscall_64+0xfa/0x790 [ 595.262166][T22210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.268055][T22210] RIP: 0033:0x45c6c9 [ 595.271954][T22210] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.291564][T22210] RSP: 002b:00007f8827779c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.300000][T22210] RAX: ffffffffffffffda RBX: 00007f882777a6d4 RCX: 000000000045c6c9 [ 595.307987][T22210] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 595.315967][T22210] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.323938][T22210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 595.331909][T22210] R13: 00000000000009cd R14: 00000000004cc71c R15: 0000000000000002 21:16:54 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4, 0x0) 21:16:55 executing program 4 (fault-call:4 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 595.546701][T22212] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 595.588809][T22212] FAT-fs (loop1): Filesystem has been set read-only [ 595.608005][T22232] FAULT_INJECTION: forcing a failure. [ 595.608005][T22232] name failslab, interval 1, probability 0, space 0, times 0 [ 595.621206][T22212] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 595.642224][ T27] audit: type=1804 audit(1581974215.107:934): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/577/bus/bus/file0" dev="overlay" ino=16817 res=1 [ 595.645346][T22232] CPU: 0 PID: 22232 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 595.677643][T22232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.687706][T22232] Call Trace: [ 595.691007][T22232] dump_stack+0x197/0x210 [ 595.695352][T22232] should_fail.cold+0x5/0xd [ 595.699872][T22232] ? fault_create_debugfs_attr+0x140/0x140 [ 595.705690][T22232] ? ___might_sleep+0x163/0x2c0 [ 595.710551][T22232] __should_failslab+0xb7/0x100 [ 595.715413][T22232] should_failslab+0x9/0x14 [ 595.719927][T22232] kmem_cache_alloc_node_trace+0x274/0x750 [ 595.725839][T22232] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 595.731822][T22232] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 595.737668][T22232] __kmalloc_node_track_caller+0x3d/0x70 [ 595.743316][T22232] __kmalloc_reserve.isra.0+0x40/0xf0 [ 595.748700][T22232] __alloc_skb+0x10b/0x5e0 [ 595.753126][T22232] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 595.758697][T22232] netlink_ack+0x25c/0xb50 [ 595.763128][T22232] ? netlink_sendmsg+0xea0/0xea0 [ 595.768074][T22232] ? crypto_netlink_rcv+0x1c/0x40 [ 595.773997][T22232] netlink_rcv_skb+0x376/0x450 [ 595.778781][T22232] ? crypto_dump_report+0x350/0x350 [ 595.783976][T22232] ? netlink_ack+0xb50/0xb50 [ 595.788554][T22232] ? __kasan_check_read+0x11/0x20 [ 595.793573][T22232] ? netlink_deliver_tap+0x248/0xbf0 [ 595.798856][T22232] crypto_netlink_rcv+0x2b/0x40 [ 595.803697][T22232] netlink_unicast+0x59e/0x7e0 [ 595.808465][T22232] ? netlink_attachskb+0x870/0x870 [ 595.813567][T22232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 595.819270][T22232] ? __check_object_size+0x3d/0x437 [ 595.824467][T22232] netlink_sendmsg+0x91c/0xea0 [ 595.829227][T22232] ? netlink_unicast+0x7e0/0x7e0 [ 595.834167][T22232] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 595.839700][T22232] ? apparmor_socket_sendmsg+0x2a/0x30 [ 595.845144][T22232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.851433][T22232] ? security_socket_sendmsg+0x8d/0xc0 [ 595.856879][T22232] ? netlink_unicast+0x7e0/0x7e0 [ 595.861812][T22232] sock_sendmsg+0xd7/0x130 [ 595.866233][T22232] ____sys_sendmsg+0x753/0x880 [ 595.871003][T22232] ? kernel_sendmsg+0x50/0x50 [ 595.875683][T22232] ? __fget_files+0x337/0x520 [ 595.880353][T22232] ? find_held_lock+0x35/0x130 [ 595.885131][T22232] ___sys_sendmsg+0x100/0x170 [ 595.889817][T22232] ? sendmsg_copy_msghdr+0x70/0x70 [ 595.894930][T22232] ? __kasan_check_read+0x11/0x20 [ 595.900053][T22232] ? __fget_files+0x359/0x520 [ 595.904738][T22232] ? ksys_dup3+0x3e0/0x3e0 [ 595.909179][T22232] ? __fget_light+0x1ad/0x270 [ 595.913847][T22232] ? __fdget+0x1b/0x20 [ 595.917947][T22232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 595.924199][T22232] __sys_sendmsg+0x105/0x1d0 [ 595.928977][T22232] ? __sys_sendmsg_sock+0xc0/0xc0 [ 595.934018][T22232] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 595.939475][T22232] ? do_syscall_64+0x26/0x790 [ 595.944149][T22232] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.950211][T22232] ? do_syscall_64+0x26/0x790 [ 595.954901][T22232] __x64_sys_sendmsg+0x78/0xb0 [ 595.959657][T22232] do_syscall_64+0xfa/0x790 [ 595.964164][T22232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.970080][T22232] RIP: 0033:0x45c6c9 [ 595.973961][T22232] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:16:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7fc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x74b, 0x0, 0x0, 0x1, [@generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7fc}], 0x1}, 0x0) [ 595.993555][T22232] RSP: 002b:00007f8827779c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.001964][T22232] RAX: ffffffffffffffda RBX: 00007f882777a6d4 RCX: 000000000045c6c9 [ 596.009934][T22232] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 596.017897][T22232] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 596.026389][T22232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 596.034355][T22232] R13: 00000000000009cd R14: 00000000004cc71c R15: 0000000000000003 21:16:55 executing program 4 (fault-call:4 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:55 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:55 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x5, 0x0) 21:16:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:55 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7fc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x74b, 0x0, 0x0, 0x1, [@generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7fc}], 0x1}, 0x0) 21:16:56 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:56 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 596.910921][T22268] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:16:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x6, 0x0) [ 596.973782][T22268] FAT-fs (loop1): Filesystem has been set read-only [ 597.009042][T22268] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:16:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:56 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:56 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 597.366074][T22287] overlayfs: './file0' not a directory 21:16:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) 21:16:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x770, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x770}], 0x1}, 0x0) 21:16:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:57 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:57 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x52e, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 598.176222][T22330] overlayfs: './file0' not a directory 21:16:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 598.208716][ T27] audit: type=1804 audit(1581974217.677:935): pid=22335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/580/bus/bus/file0" dev="overlay" ino=16549 res=1 21:16:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 21:16:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x2e05, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x770, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x770}], 0x1}, 0x0) 21:16:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x3f00, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:58 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 598.701161][T22341] overlayfs: './file0' not a directory [ 598.708814][ T27] audit: type=1804 audit(1581974218.177:936): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/581/bus/bus/file0" dev="overlay" ino=16675 res=1 21:16:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x300, 0x0) 21:16:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:58 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 599.431699][ T27] audit: type=1804 audit(1581974218.897:937): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/582/bus/bus/file0" dev="overlay" ino=16619 res=1 21:16:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x770, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x770}], 0x1}, 0x0) 21:16:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x500, 0x0) 21:16:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 600.036084][T22406] overlayfs: './file0' not a directory [ 600.084196][ T27] audit: type=1804 audit(1581974219.557:938): pid=22416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/583/bus/bus/file0" dev="overlay" ino=16610 res=1 21:16:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:16:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x600, 0x0) 21:16:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:16:59 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:16:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x2e050000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 600.645042][T22434] overlayfs: './file0' not a directory [ 600.694616][ T27] audit: type=1804 audit(1581974220.167:939): pid=22439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/584/bus/bus/file0" dev="overlay" ino=16737 res=1 21:17:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x770, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic, @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x770}], 0x1}, 0x0) 21:17:00 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x700, 0x0) 21:17:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x3f000000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xff00, 0x0) 21:17:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:00 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 601.717253][ T27] audit: type=1800 audit(1581974221.187:940): pid=22484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="overlay" ino=16525 res=0 [ 601.770201][T22484] overlayfs: './file0' not a directory [ 601.786723][ T27] audit: type=1804 audit(1581974221.257:941): pid=22489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/586/bus/bus/file0" dev="overlay" ino=16738 res=1 21:17:01 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 601.848499][ T27] audit: type=1800 audit(1581974221.297:942): pid=22489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="overlay" ino=16738 res=0 [ 601.895033][T22490] overlayfs: failed to resolve './file1': -2 21:17:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x770, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic, @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x770}], 0x1}, 0x0) 21:17:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1000000, 0x0) 21:17:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:01 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 602.341666][T22516] overlayfs: failed to resolve './file1': -2 21:17:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 602.467977][T22520] overlayfs: './file0' not a directory 21:17:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0) [ 602.751296][T22535] overlayfs: failed to resolve './file1': -2 21:17:02 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x770, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic, @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x770}], 0x1}, 0x0) 21:17:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xf, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:02 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 603.302689][T22549] overlayfs: './file0' not a directory 21:17:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 603.348090][ T27] audit: type=1804 audit(1581974222.817:943): pid=22557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/588/bus/bus/file0" dev="overlay" ino=16547 res=1 21:17:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0x2c0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:03 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, 0x0, 0x8080fffffffe) 21:17:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3000000, 0x0) 21:17:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xec0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:03 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 603.937699][ T27] audit: type=1804 audit(1581974223.407:944): pid=22589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/589/bus/file0" dev="sda1" ino=16568 res=1 21:17:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0x33fe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 604.095827][T22589] overlayfs: './file0' not a directory 21:17:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7bc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7bc}], 0x1}, 0x0) 21:17:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0x200002e0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4000000, 0x0) 21:17:03 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 21:17:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0x7ffff000, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 604.695315][T22616] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 604.723353][T22616] FAT-fs (loop1): Filesystem has been set read-only [ 604.735463][T22616] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 604.758965][T22617] overlayfs: failed to resolve './bus': -2 21:17:04 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 21:17:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xfffffdef, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 604.863069][ T27] audit: type=1804 audit(1581974224.327:945): pid=22629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/590/bus/file0" dev="sda1" ino=16707 res=1 21:17:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:04 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 21:17:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x5000000, 0x0) [ 605.096963][T22635] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 605.105834][T22635] FAT-fs (loop1): Filesystem has been set read-only [ 605.112690][T22635] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 605.271093][T22641] overlayfs: failed to resolve './file0': -2 [ 605.420820][T22648] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 605.483375][T22648] FAT-fs (loop1): Filesystem has been set read-only [ 605.525711][T22648] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7bc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x7bc}], 0x1}, 0x0) 21:17:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0xf, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x6000000, 0x0) [ 605.560349][ T27] audit: type=1804 audit(1581974225.027:946): pid=22652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/591/bus/bus/file0" dev="overlay" ino=17009 res=1 21:17:05 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x0) [ 605.666364][T22656] overlayfs: failed to resolve './file0': -2 21:17:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x15, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 605.957266][T22675] overlayfs: failed to resolve './file0': -2 21:17:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x2, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:05 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x0) 21:17:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7000000, 0x0) [ 606.105474][ T27] audit: type=1804 audit(1581974225.577:947): pid=22684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/592/bus/bus/file0" dev="overlay" ino=16737 res=1 [ 606.514499][ T27] audit: type=1804 audit(1581974225.987:948): pid=22702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/593/bus/bus/file0" dev="overlay" ino=16691 res=1 21:17:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7bc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7bc}], 0x1}, 0x0) 21:17:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x3, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x8000000, 0x0) 21:17:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:06 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x0) 21:17:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 607.103396][T22724] overlayfs: './file0' not a directory 21:17:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0) 21:17:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x300, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7e0, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7ba", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7e0}], 0x1}, 0x0) 21:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x52e, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:07 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 607.701730][T22750] overlayfs: './file0' not a directory 21:17:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf00, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xfeffffff, 0x0) 21:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x10888, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 608.067817][T22758] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 608.096921][T22758] FAT-fs (loop1): Filesystem has been set read-only 21:17:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x2e05, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 608.127439][T22758] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 608.365712][T22782] overlayfs: './file0' not a directory 21:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x3f00, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xff000000, 0x0) 21:17:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7e0, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7ba", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7e0}], 0x1}, 0x0) 21:17:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 21:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) 21:17:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 608.926309][ T27] audit: type=1804 audit(1581974228.397:949): pid=22808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/597/bus/bus/file0" dev="overlay" ino=16641 res=1 21:17:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x34000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 608.991899][T22810] overlayfs: missing 'lowerdir' 21:17:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x0) 21:17:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) 21:17:08 executing program 1 (fault-call:10 fault-nth:0): ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x400300, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 609.407501][T22823] overlayfs: missing 'lowerdir' 21:17:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) 21:17:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf0ffff, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 609.534809][T22818] overlayfs: './file0' not a directory [ 609.575543][T22828] FAULT_INJECTION: forcing a failure. [ 609.575543][T22828] name failslab, interval 1, probability 0, space 0, times 0 [ 609.669302][T22828] CPU: 0 PID: 22828 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0 [ 609.678029][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.688092][T22828] Call Trace: [ 609.691406][T22828] dump_stack+0x197/0x210 [ 609.695764][T22828] should_fail.cold+0x5/0xd [ 609.700310][T22828] ? fault_create_debugfs_attr+0x140/0x140 [ 609.706139][T22828] ? ___might_sleep+0x163/0x2c0 [ 609.711013][T22828] __should_failslab+0xb7/0x100 [ 609.715879][T22828] should_failslab+0x9/0x14 [ 609.720401][T22828] kmem_cache_alloc_trace+0x2d3/0x790 [ 609.725781][T22828] ? _parse_integer+0x139/0x190 [ 609.731523][T22828] alloc_pipe_info+0x10e/0x510 [ 609.736370][T22828] splice_direct_to_actor+0x80e/0xa30 [ 609.741845][T22828] ? __lock_acquire+0x16f2/0x4a00 [ 609.746883][T22828] ? generic_pipe_buf_nosteal+0x10/0x10 [ 609.752459][T22828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.758712][T22828] ? do_splice_to+0x180/0x180 [ 609.763404][T22828] ? rw_verify_area+0x126/0x360 [ 609.768272][T22828] do_splice_direct+0x1da/0x2a0 [ 609.773135][T22828] ? splice_direct_to_actor+0xa30/0xa30 [ 609.778681][T22828] ? rcu_read_lock_any_held+0xcd/0xf0 [ 609.784085][T22828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.790328][T22828] ? __this_cpu_preempt_check+0x35/0x190 [ 609.795970][T22828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.802649][T22828] ? __sb_start_write+0x1e5/0x460 [ 609.807734][T22828] do_sendfile+0x597/0xd00 [ 609.812190][T22828] ? do_compat_pwritev64+0x1c0/0x1c0 [ 609.817700][T22828] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 609.823965][T22828] ? _copy_from_user+0x12c/0x1a0 [ 609.828916][T22828] __x64_sys_sendfile64+0x15a/0x220 [ 609.834125][T22828] ? __ia32_sys_sendfile+0x230/0x230 [ 609.839417][T22828] ? do_syscall_64+0x26/0x790 [ 609.844106][T22828] ? lockdep_hardirqs_on+0x421/0x5e0 [ 609.849456][T22828] ? trace_hardirqs_on+0x67/0x240 [ 609.854503][T22828] do_syscall_64+0xfa/0x790 [ 609.859032][T22828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.865040][T22828] RIP: 0033:0x45c6c9 [ 609.869015][T22828] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.888759][T22828] RSP: 002b:00007f0a876d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 609.897164][T22828] RAX: ffffffffffffffda RBX: 00007f0a876d56d4 RCX: 000000000045c6c9 [ 609.905236][T22828] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000004 21:17:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x1000000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 609.913215][T22828] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.921306][T22828] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000007 [ 609.929286][T22828] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000000 [ 610.030791][T22840] overlayfs: missing 'lowerdir' 21:17:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7e0, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7ba", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7e0}], 0x1}, 0x0) 21:17:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xfffffffe, 0x0) 21:17:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x2000000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) 21:17:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x3000000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 610.295209][T22856] overlayfs: missing 'lowerdir' 21:17:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1000000000000, 0x0) 21:17:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) 21:17:09 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf000000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 610.698444][T22871] overlayfs: missing 'lowerdir' 21:17:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x2e050000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) [ 610.845771][ T27] audit: type=1804 audit(1581974230.317:950): pid=22883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/600/bus/file0" dev="sda1" ino=16753 res=1 [ 610.935897][T22883] overlayfs: './file0' not a directory 21:17:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x3f000000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 611.053573][T22890] overlayfs: missing 'lowerdir' 21:17:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7f4}], 0x1}, 0x0) 21:17:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x100000000000000, 0x0) 21:17:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) [ 611.301463][T22893] overlayfs: missing 'lowerdir' 21:17:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 21:17:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x9effffff, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:10 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x300, 0x8080fffffffe) [ 611.542666][T22906] overlayfs: './file0' not a directory [ 611.566548][ T27] audit: type=1804 audit(1581974231.037:951): pid=22908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/601/bus/bus/file0" dev="overlay" ino=16526 res=1 [ 611.592045][T22911] overlayfs: missing 'lowerdir' 21:17:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200000000000000, 0x0) 21:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 21:17:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xf0ffffff, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 611.971199][T22924] overlayfs: missing 'lowerdir' 21:17:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x300000000000000, 0x0) 21:17:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xfffff000, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 612.001128][T22928] overlayfs: './file0' not a directory [ 612.010911][ T27] audit: type=1804 audit(1581974231.477:952): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/602/bus/bus/file0" dev="overlay" ino=16707 res=1 21:17:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) 21:17:11 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x7f4}], 0x1}, 0x0) 21:17:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xffffff7f, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x400000000000000, 0x0) [ 612.410525][T22936] overlayfs: './file0' not a directory [ 612.419953][ T27] audit: type=1804 audit(1581974231.887:953): pid=22946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/603/bus/bus/file0" dev="overlay" ino=16595 res=1 21:17:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xffffff9e, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 612.523716][T22947] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 612.568532][T22947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.589124][T22953] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa2) [ 612.677706][T22953] FAT-fs (loop1): Filesystem has been set read-only 21:17:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) [ 612.729483][T22953] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa2) [ 612.777004][T22961] overlayfs: './file0' not a directory 21:17:12 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x502, 0x8080fffffffe) 21:17:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xfffffff0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 612.840140][ T27] audit: type=1804 audit(1581974232.307:954): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/604/bus/bus/file0" dev="overlay" ino=16789 res=1 21:17:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x500000000000000, 0x0) [ 612.924054][T22965] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 21:17:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0xffffffff, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 613.016162][T22965] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 21:17:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) [ 613.282537][T22981] overlayfs: './file0' not a directory 21:17:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x600000000000000, 0x0) [ 613.314945][ T27] audit: type=1804 audit(1581974232.787:955): pid=22988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/605/bus/bus/file0" dev="overlay" ino=16542 res=1 [ 613.377581][T22989] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 21:17:12 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7f4}], 0x1}, 0x0) 21:17:12 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x503, 0x8080fffffffe) 21:17:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x2, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 613.421327][T22989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 21:17:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) 21:17:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x3, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x700000000000000, 0x0) [ 613.751090][T23005] overlayfs: './file0' not a directory [ 613.760048][ T27] audit: type=1804 audit(1581974233.227:956): pid=23013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/606/bus/bus/file0" dev="overlay" ino=16897 res=1 [ 613.879192][T23008] overlayfs: unrecognized mount option "upper" or missing value 21:17:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) 21:17:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 614.279508][T23027] overlayfs: unrecognized mount option "upper" or missing value 21:17:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) [ 614.516165][T23032] overlayfs: './file0' not a directory 21:17:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800000000000000, 0x0) 21:17:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x300, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 614.606511][T23038] overlayfs: unrecognized mount option "upper" or missing value 21:17:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7fc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7fc}], 0x1}, 0x0) 21:17:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) 21:17:14 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x504, 0x8080fffffffe) 21:17:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x52e, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 614.997952][ T27] audit: type=1804 audit(1581974234.467:957): pid=23049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/608/bus/bus/file0" dev="overlay" ino=16630 res=1 21:17:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff00000000, 0x0) 21:17:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf00, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 615.109232][T23055] overlayfs: workdir and upperdir must be separate subtrees 21:17:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) [ 615.268028][T23057] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 615.326381][T23057] FAT-fs (loop1): Filesystem has been set read-only [ 615.362462][T23068] overlayfs: workdir and upperdir must be separate subtrees 21:17:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x2e05, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 615.371594][T23057] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) [ 615.623475][ T27] audit: type=1804 audit(1581974235.087:958): pid=23082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/609/bus/bus/file0" dev="overlay" ino=16884 res=1 21:17:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x3f00, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:15 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x505, 0x8080fffffffe) 21:17:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xfeffffff00000000, 0x0) [ 615.709104][T23083] overlayfs: workdir and upperdir must be separate subtrees 21:17:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7fc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7fc}], 0x1}, 0x0) 21:17:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) 21:17:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 616.065822][T23099] overlayfs: failed to resolve './fil': -2 [ 616.084488][T23088] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 616.118527][T23088] FAT-fs (loop1): Filesystem has been set read-only [ 616.153120][T23088] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) 21:17:15 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x506, 0x8080fffffffe) [ 616.335491][T23106] overlayfs: './file0' not a directory 21:17:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x34000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 616.368563][ T27] audit: type=1804 audit(1581974235.837:959): pid=23112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/610/bus/bus/file0" dev="overlay" ino=16738 res=1 21:17:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xff00000000000000, 0x0) [ 616.474658][T23113] overlayfs: failed to resolve './fil': -2 21:17:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x400300, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) 21:17:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000080)=[0x0], 0x1}) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000340)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000300)=0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000240)={0x0}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r11, 0xc010640b, &(0x7f0000000280)={0x0, 0x0, 0x100}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000002c0)={r9, r12}) recvfrom$inet6(r4, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) [ 616.636110][T23119] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 616.710882][T23119] FAT-fs (loop1): Filesystem has been set read-only 21:17:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf0ffff, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 616.751478][T23119] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 616.852272][T23130] overlayfs: failed to resolve './fil': -2 21:17:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7fc, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7fc}], 0x1}, 0x0) 21:17:16 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x507, 0x8080fffffffe) 21:17:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x1000000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) [ 617.100211][T23141] overlayfs: './file0' not a directory [ 617.110901][ T27] audit: type=1804 audit(1581974236.577:960): pid=23147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/611/bus/bus/file0" dev="overlay" ino=16662 res=1 21:17:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xffffffff00000000, 0x0) 21:17:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x2000000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 617.255548][T23157] overlayfs: failed to resolve './file': -2 [ 617.331441][T23156] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) 21:17:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x3000000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 617.411747][T23156] FAT-fs (loop1): Filesystem has been set read-only [ 617.433562][T23164] overlayfs: './file0' not a directory [ 617.444282][ T27] audit: type=1804 audit(1581974236.917:961): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/612/bus/bus/file0" dev="overlay" ino=16673 res=1 [ 617.471761][T23156] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2) 21:17:17 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000200)="5d4123bf5e46963b116ad0c1f821b26e00c5ea1eac7dcb508b4ca9e0a98384b4e0860390ac1f771b6266f2a285d5403c19938d811b0a56c55e2595a231e626cfcc2a3031924fc62f68d3758d0d744d219c52febfa29dfbd11859f52a518f5c79e0693d8c2df332ad", &(0x7f0000000280)=""/250, &(0x7f0000000080), &(0x7f0000000e00)="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", 0x80000000, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$rfkill(r5, &(0x7f0000000080), 0x8) sendto$inet6(r3, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:17 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x508, 0x8080fffffffe) [ 617.617247][T23176] overlayfs: failed to resolve './file': -2 21:17:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf000000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x800}], 0x1}, 0x0) 21:17:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) 21:17:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x2e050000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 618.018262][T23190] overlayfs: './file0' not a directory 21:17:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3) [ 618.056982][ T27] audit: type=1804 audit(1581974237.527:962): pid=23200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/613/bus/bus/file0" dev="overlay" ino=16712 res=1 [ 618.090744][T23198] overlayfs: failed to resolve './file': -2 21:17:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x3f000000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:17 executing program 2: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x503, 0x8080fffffffe) [ 618.422475][T23211] overlayfs: './file0' not a directory 21:17:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4) [ 618.457686][ T27] audit: type=1804 audit(1581974237.927:963): pid=23215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/614/bus/bus/file0" dev="overlay" ino=16641 res=1 21:17:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x9effffff, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:18 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x509, 0x8080fffffffe) 21:17:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xf0ffffff, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x5) [ 618.959214][T23235] overlayfs: './file0' not a directory [ 618.974411][ T27] audit: type=1804 audit(1581974238.447:964): pid=23236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/615/bus/bus/file0" dev="overlay" ino=16567 res=1 21:17:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000740)={0xfff, 0x4, 0x4, 0x4000, 0x4, {0x0, 0x2710}, {0x3, 0x8, 0xff, 0x1, 0x6, 0x1, "e576c9b7"}, 0x1, 0x3, @planes=&(0x7f0000000700)={0x7fffffff, 0x1, @userptr=0x1}, 0x4, 0x0, 0xffffffffffffffff}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @dev}, r8}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x7, "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", 0x4, 0x4, 0x40, 0x0, 0xff, 0x0, 0x5, 0x1}, r8}}, 0x128) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendto$inet6(r9, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) vmsplice(r10, &(0x7f0000000580)=[{&(0x7f0000000200)="1fa78a16a1299c8f16d54de6dc9165b830a429a4d422818fa500bcec9bd4a4b095ec23c6cf90ee138bb4afd41116d8d6fe51c2b392bb63f2ccc7f3d191e8774107069fd1744217baeaaa59b4fe6ccdadd3145d73868ab07f8f3d76eac6e59fabd41e3911b20b4f0d6c6f89eb1f7f659aa37a2578a7c96c27e2c1f32dd6c43c8f0340b3553d9d4260a979812c2352f9b26a5fc5d4e8f203536f66f65bdccbb6871af609728100301ae205aa8473b42896bcb609f932ecfbd4822565cab83740b88603120f99a1944f8b1e", 0xca}, {&(0x7f0000000300)="025cee7682adc58f3ca7b51d30aa7f328cc1791646c5fa195b8d46396c50f03709244869bed0dcd4eb4c2a2238627cedc48252edc5eb9bfdadcd993ca5aa1b91df350ec354882f749a79672df74e6185fd040f98e3b61901c882372b00b76ce9e0d7aed1e17e9d91b41ce748e65d8e1f6c649d9bd1a22257cdb451914c4b4920beeb7b2c6a82ca399d323eb4c71b0ca34585e05cb81d6a93acab6a0060bc7f497eb4f70521720ab604e365372a74496ea27fe5ab", 0xb4}, {&(0x7f0000000080)}, {&(0x7f00000003c0)="49102bd0534bdbbd616c4101b1f813816cfc62693fb6771398b1b0a5296c3718f726f88e7774c0880a7dba7dfcb3ac7d79813946d0c04c55ccb0e4", 0x3b}, {&(0x7f0000000400)="3207918a3674a020dde5ab0bc8f48ab437c855e1b1401bcf8aff5d7f69755ffcbbbc2484b5bba2470c5e2dbd69fcb56007202c0e9e828f910378f9e2150df439ec955db090e3b66b3acb04", 0x4b}, {&(0x7f0000000480)="62c66515ec846cd78156ee4098e44c5c040fa32055699b59386fd24033e72fbe532dcb755da27ecd0f620d7103081b9932caa547f2f5b73664f9dc37cd673af9414e03c56e05d53a1ec51d880a23b78123f3d52c481302aef89e09feb685865df28c143c506bbc4c5854ee2f49e428e8429aa4176f19e6fe855f47787d376ef0af217e45081003fd613bc21cc5670c1375f410ce6b17561768ab8324e6ac0f242cb31cb6a7359de2545d146b5d28b6cc300702b9e9e80b25654f25e7f847d65d1041b759ea527e634b645c6de9ecbe1d3127f79771", 0xd5}], 0x6, 0x9) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x4c, 0xf, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 21:17:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x800}], 0x1}, 0x0) [ 619.193197][T23238] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xfffff000, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 619.330227][T23238] FAT-fs (loop1): Filesystem has been set read-only [ 619.343266][T23238] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:18 executing program 2: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x503, 0x8080fffffffe) 21:17:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xffffff7f, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:18 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x50c, 0x8080fffffffe) 21:17:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xffffff9e, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 619.554499][ T27] audit: type=1804 audit(1581974239.027:965): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/616/bus/bus/file0" dev="overlay" ino=16488 res=1 [ 619.666661][T23272] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 619.675630][T23272] FAT-fs (loop1): Filesystem has been set read-only [ 619.683568][T23272] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:19 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x50d, 0x8080fffffffe) 21:17:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6) 21:17:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xfffffff0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @rand_addr="964b5f52e728ed011768f4e309e3a648"}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x24001, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x40) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0xffffffff, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 620.079657][T23295] overlayfs: './file0' not a directory 21:17:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x800, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x800}], 0x1}, 0x0) [ 620.168279][ T27] audit: type=1804 audit(1581974239.637:966): pid=23302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/617/bus/bus/file0" dev="overlay" ino=16642 res=1 21:17:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7) 21:17:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x3]}}, 0xe0}}, 0x0) 21:17:19 executing program 2: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x503, 0x8080fffffffe) 21:17:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x2]}}, 0xe0}}, 0x0) 21:17:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x3]}}, 0xe0}}, 0x0) [ 620.859026][T23327] overlayfs: './file0' not a directory 21:17:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0xf]}}, 0xe0}}, 0x0) 21:17:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8) 21:17:20 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x510, 0x8080fffffffe) 21:17:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$rose(r4, 0x0, &(0x7f0000000080), 0x40800) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f151", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) [ 621.371028][T23349] overlayfs: './file0' not a directory [ 621.383126][ T27] audit: type=1804 audit(1581974240.857:967): pid=23357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/619/bus/bus/file0" dev="overlay" ino=16675 res=1 21:17:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x300) 21:17:21 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 621.771839][T23373] FAULT_INJECTION: forcing a failure. [ 621.771839][T23373] name failslab, interval 1, probability 0, space 0, times 0 [ 621.832717][T23373] CPU: 0 PID: 23373 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 621.841430][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.851491][T23373] Call Trace: [ 621.851782][T23371] overlayfs: './file0' not a directory [ 621.854794][T23373] dump_stack+0x197/0x210 [ 621.854827][T23373] should_fail.cold+0x5/0xd [ 621.854853][T23373] ? fault_create_debugfs_attr+0x140/0x140 [ 621.854877][T23373] ? ___might_sleep+0x163/0x2c0 [ 621.880762][T23373] __should_failslab+0xb7/0x100 [ 621.885628][T23373] should_failslab+0x9/0x14 [ 621.890146][T23373] __kmalloc_track_caller+0x2dc/0x760 [ 621.895512][T23373] ? fput+0x1b/0x20 [ 621.899322][T23373] ? ksys_write+0x1cf/0x290 [ 621.903809][T23373] ? strndup_user+0x77/0xd0 [ 621.908314][T23373] memdup_user+0x26/0xd0 [ 621.912560][T23373] strndup_user+0x77/0xd0 [ 621.916894][T23373] __x64_sys_mount+0xe9/0x230 [ 621.921565][T23373] do_syscall_64+0xfa/0x790 [ 621.926063][T23373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.931966][T23373] RIP: 0033:0x45c6c9 [ 621.935857][T23373] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.955459][T23373] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.963867][T23373] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 621.971839][T23373] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 21:17:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x500) 21:17:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 621.979845][T23373] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 621.987811][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 621.995774][T23373] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000000 [ 622.004350][ T27] audit: type=1804 audit(1581974241.297:968): pid=23379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/620/bus/bus/file0" dev="overlay" ino=16733 res=1 21:17:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:21 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x512, 0x8080fffffffe) 21:17:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f151", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:21 executing program 2 (fault-call:7 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 622.442501][ T27] audit: type=1804 audit(1581974241.907:969): pid=23401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/621/bus/bus/file0" dev="overlay" ino=16565 res=1 [ 622.477868][T23396] overlayfs: './file0' not a directory 21:17:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x600) [ 622.631820][T23405] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 622.651766][T23415] FAULT_INJECTION: forcing a failure. [ 622.651766][T23415] name failslab, interval 1, probability 0, space 0, times 0 [ 622.665595][T23415] CPU: 1 PID: 23415 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 21:17:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 622.674288][T23415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.684346][T23415] Call Trace: [ 622.687649][T23415] dump_stack+0x197/0x210 [ 622.692005][T23415] should_fail.cold+0x5/0xd [ 622.696528][T23415] ? __might_fault+0x12b/0x1e0 [ 622.701439][T23415] ? fault_create_debugfs_attr+0x140/0x140 [ 622.707264][T23415] ? ___might_sleep+0x163/0x2c0 [ 622.712137][T23415] __should_failslab+0xb7/0x100 [ 622.716999][T23415] should_failslab+0x9/0x14 [ 622.718646][T23405] FAT-fs (loop1): Filesystem has been set read-only [ 622.721507][T23415] __kmalloc_track_caller+0x2dc/0x760 [ 622.721542][T23415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 622.721556][T23415] ? strndup_user+0x77/0xd0 [ 622.721576][T23415] memdup_user+0x26/0xd0 [ 622.748489][T23415] strndup_user+0x77/0xd0 [ 622.752839][T23415] __x64_sys_mount+0x132/0x230 [ 622.757622][T23415] do_syscall_64+0xfa/0x790 [ 622.762149][T23415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.768041][T23415] RIP: 0033:0x45c6c9 [ 622.771944][T23415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.791552][T23415] RSP: 002b:00007f6d47a2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 622.799973][T23415] RAX: ffffffffffffffda RBX: 00007f6d47a2e6d4 RCX: 000000000045c6c9 [ 622.802578][T23405] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 622.807945][T23415] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 622.807954][T23415] RBP: 000000000076bfc8 R08: 0000000020000100 R09: 0000000000000000 [ 622.807962][T23415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 622.807970][T23415] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000001 21:17:22 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x514, 0x8080fffffffe) [ 622.877109][ T27] audit: type=1804 audit(1581974242.347:970): pid=23422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/622/bus/file0" dev="sda1" ino=16614 res=1 21:17:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x2700, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) connect$pppl2tp(r8, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x1b, @local, 0x8}}}, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="79799e3e7830a27d4ef27fd5bed9882e7c5a6259d9a6612f39c2e0c213dd096f30dcb602b4e1b1bb2f9efa9a9f1c65631f2417f497af2e860a6952d00f35a66edcb88ded09601b3a9404261d182c1bee02e4b0cd4858ccefdb7011668f77fc308c8cc4c971a7b6854ea28b4464dc029a8036f63e3d49166fa26070d02539fbfe28a0406cfd9b7b3a603443da3ef2bbca9bc908074b493ceb49cc29db8a7115868e67d5bb192c902544599f4709515d65e48ee613312f58589f33b03a35c6adb1050db5d16e9b8144fe24320b9458efd95f42d943ef4a332d95554f87e7fc68f0be442185efd346452d", 0xe9}, {&(0x7f0000000600)="4ee7e0c2c711a8d4ccf2be386007734b502f6a505d08c1823b329b0b0a87a9081970abe7dec5f96da1b4a52041164733ed2a9ce1bc9ddba7be3713940a71d28f4bcd5878d998d7c78cabf45c37ab21acc602ff4522726536bba2fe487be0be0fe2266f38fe88d285d5ac4030ac121fd53c55249d65b2ca856199139e5cca7f346667f2382f75a2e29eede1114d4ba3af65b681a1a01b71b1f72c083c83db115191745e50d25250fb96facbafa700"/186, 0xba}, {&(0x7f00000006c0)="6ff6f24a52eec42ff91417bca838cfb3c8d3405db8e14f9c7ce2dc04c13fa1f2510101b144c6386b6a8fc58744e548fc0fc7bf81", 0x34}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="140000000000000029000000430000009d00000000000000500000000000000029000000370000005c0600000000000005020fffc20400000004c208000000000000000000000607ff7f0600000000000008000000000000000000000000002900000034000000f7ffffff000000004eac2465d64d385006d0916fb5ea34e4eb136a0fda6560b2935e7ea4eabbe4cc2b9312e5ea840245cc559ef62ae918d91cf95b2ad935cf57298200"/185], 0xb9}, 0x8000) bind$inet6(r6, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) fsetxattr(r10, &(0x7f0000000440)=@random={'system.', 'timerslack_ns\x00'}, &(0x7f0000000480)='\x00', 0x1, 0x2) recvfrom$inet6(r6, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) [ 622.962939][ T27] audit: type=1804 audit(1581974242.417:971): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/622/bus/bus/file0" dev="sda1" ino=16696 res=1 21:17:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x700) 21:17:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:22 executing program 2 (fault-call:7 fault-nth:2): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 623.265406][T23444] FAULT_INJECTION: forcing a failure. [ 623.265406][T23444] name failslab, interval 1, probability 0, space 0, times 0 [ 623.280604][T23434] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 623.332059][T23434] FAT-fs (loop1): Filesystem has been set read-only [ 623.350425][T23434] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 623.395738][T23447] overlayfs: './file0' not a directory [ 623.405756][ T27] audit: type=1804 audit(1581974242.877:972): pid=23450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/623/bus/bus/file0" dev="overlay" ino=16689 res=1 [ 623.428457][T23444] CPU: 0 PID: 23444 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 21:17:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xff00) [ 623.440055][T23444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.450117][T23444] Call Trace: [ 623.453429][T23444] dump_stack+0x197/0x210 [ 623.457787][T23444] should_fail.cold+0x5/0xd [ 623.462315][T23444] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 623.468490][T23444] ? fault_create_debugfs_attr+0x140/0x140 [ 623.474323][T23444] ? ___might_sleep+0x163/0x2c0 [ 623.479190][T23444] __should_failslab+0xb7/0x100 [ 623.484055][T23444] should_failslab+0x9/0x14 [ 623.488567][T23444] kmem_cache_alloc_trace+0x2d3/0x790 [ 623.493942][T23444] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 623.500182][T23444] ? _copy_from_user+0x12c/0x1a0 [ 623.505127][T23444] copy_mount_options+0x58/0x170 [ 623.510085][T23444] __x64_sys_mount+0x15e/0x230 [ 623.514863][T23444] do_syscall_64+0xfa/0x790 [ 623.519387][T23444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.525287][T23444] RIP: 0033:0x45c6c9 [ 623.529210][T23444] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.548817][T23444] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 623.557231][T23444] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 623.565345][T23444] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 623.573321][T23444] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 623.581298][T23444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:17:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f151", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 623.589274][T23444] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000002 21:17:23 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x517, 0x8080fffffffe) 21:17:23 executing program 2 (fault-call:7 fault-nth:3): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 623.912701][T23475] FAULT_INJECTION: forcing a failure. [ 623.912701][T23475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 623.926036][T23475] CPU: 1 PID: 23475 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 623.928466][T23476] overlayfs: './file0' not a directory [ 623.934811][T23475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.934818][T23475] Call Trace: [ 623.934844][T23475] dump_stack+0x197/0x210 [ 623.934875][T23475] should_fail.cold+0x5/0xd [ 623.934900][T23475] ? fault_create_debugfs_attr+0x140/0x140 [ 623.934920][T23475] ? __kasan_check_read+0x11/0x20 [ 623.934944][T23475] ? __lock_acquire+0x16f2/0x4a00 [ 623.978370][T23475] ? __kasan_check_read+0x11/0x20 [ 623.983412][T23475] should_fail_alloc_page+0x50/0x60 [ 623.988625][T23475] __alloc_pages_nodemask+0x1a1/0x910 [ 623.994022][T23475] ? fs_reclaim_release+0xf/0x30 [ 623.998982][T23475] ? __alloc_pages_slowpath+0x2900/0x2900 [ 624.004711][T23475] ? fs_reclaim_release+0xf/0x30 [ 624.009660][T23475] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 624.015845][T23475] cache_grow_begin+0x90/0xc60 [ 624.020732][T23475] ? trace_hardirqs_off+0x62/0x240 [ 624.025867][T23475] kmem_cache_alloc_trace+0x6b3/0x790 [ 624.031263][T23475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 624.037528][T23475] copy_mount_options+0x58/0x170 [ 624.042474][T23475] __x64_sys_mount+0x15e/0x230 [ 624.047257][T23475] do_syscall_64+0xfa/0x790 [ 624.051782][T23475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.057680][T23475] RIP: 0033:0x45c6c9 21:17:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 624.061581][T23475] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.081189][T23475] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 624.089605][T23475] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 624.098022][T23475] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 624.105998][T23475] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 624.113978][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 624.121953][T23475] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000003 [ 624.130531][ T27] audit: type=1804 audit(1581974243.447:973): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/624/bus/bus/file0" dev="overlay" ino=16659 res=1 21:17:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000) 21:17:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r4, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x2000c150, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:23 executing program 2 (fault-call:7 fault-nth:4): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f15124", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 624.670371][T23503] overlayfs: failed to resolve './file0': -2 21:17:24 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x518, 0x8080fffffffe) [ 624.719768][ T27] audit: type=1804 audit(1581974244.187:974): pid=23508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/625/bus/bus/file0" dev="overlay" ino=16610 res=1 21:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2000000) [ 624.829979][ T27] audit: type=1804 audit(1581974244.237:975): pid=23495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/625/bus/bus/file0" dev="overlay" ino=16610 res=1 21:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 624.958046][T23521] FAULT_INJECTION: forcing a failure. [ 624.958046][T23521] name failslab, interval 1, probability 0, space 0, times 0 21:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 625.108186][T23521] CPU: 0 PID: 23521 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 625.116914][T23521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.126986][T23521] Call Trace: [ 625.130297][T23521] dump_stack+0x197/0x210 [ 625.134666][T23521] should_fail.cold+0x5/0xd [ 625.139203][T23521] ? fault_create_debugfs_attr+0x140/0x140 [ 625.145051][T23521] ? ___might_sleep+0x163/0x2c0 [ 625.149935][T23521] __should_failslab+0xb7/0x100 [ 625.154810][T23521] should_failslab+0x9/0x14 [ 625.159344][T23521] __kmalloc+0x2e0/0x770 [ 625.163620][T23521] ? save_stack+0x5c/0x90 [ 625.165336][T23532] overlayfs: './file0' not a directory [ 625.167963][T23521] ? tomoyo_encode2.part.0+0xf5/0x400 [ 625.168006][T23521] tomoyo_encode2.part.0+0xf5/0x400 [ 625.168025][T23521] ? do_syscall_64+0xfa/0x790 [ 625.168046][T23521] tomoyo_encode+0x2b/0x50 [ 625.168067][T23521] tomoyo_mount_acl+0xe0/0x840 [ 625.197932][T23521] ? debug_check_no_obj_freed+0x20a/0x441 [ 625.203672][T23521] ? __kasan_check_read+0x11/0x20 [ 625.208711][T23521] ? mark_lock+0xc2/0x1220 [ 625.213148][T23521] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 625.218739][T23521] ? __kasan_check_read+0x11/0x20 [ 625.223777][T23521] ? __lock_acquire+0x8a0/0x4a00 [ 625.228732][T23521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.234991][T23521] ? debug_smp_processor_id+0x33/0x18a [ 625.240485][T23521] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 625.246688][T23521] ? lock_acquire+0x190/0x410 [ 625.251381][T23521] ? tomoyo_mount_permission+0x10a/0x400 [ 625.257049][T23521] tomoyo_mount_permission+0x16a/0x400 [ 625.262525][T23521] ? tomoyo_mount_permission+0x10a/0x400 [ 625.268287][T23521] ? tomoyo_mount_acl+0x840/0x840 [ 625.273357][T23521] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 625.279615][T23521] ? strncpy_from_user+0x2d1/0x410 [ 625.284757][T23521] tomoyo_sb_mount+0x35/0x40 [ 625.289380][T23521] security_sb_mount+0x87/0xd0 [ 625.294171][T23521] do_mount+0x1d4/0x1b50 [ 625.298474][T23521] ? copy_mount_string+0x40/0x40 [ 625.303435][T23521] ? _copy_from_user+0x12c/0x1a0 [ 625.308395][T23521] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 625.314659][T23521] __x64_sys_mount+0x192/0x230 [ 625.319442][T23521] do_syscall_64+0xfa/0x790 [ 625.323970][T23521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.329868][T23521] RIP: 0033:0x45c6c9 [ 625.333772][T23521] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.353503][T23521] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 625.361930][T23521] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 625.370011][T23521] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 625.377996][T23521] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 625.386004][T23521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 625.393988][T23521] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000004 21:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 625.402560][ T27] audit: type=1804 audit(1581974244.577:976): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/626/bus/bus/file0" dev="overlay" ino=16660 res=1 21:17:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3000000) 21:17:25 executing program 2 (fault-call:7 fault-nth:5): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f15124", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x10040, 0x0) r7 = dup2(r0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r8, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x20) sendto$inet6(r8, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:25 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x519, 0x8080fffffffe) 21:17:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000000) 21:17:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 625.900195][T23563] FAULT_INJECTION: forcing a failure. [ 625.900195][T23563] name failslab, interval 1, probability 0, space 0, times 0 [ 625.915293][T23563] CPU: 1 PID: 23563 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 625.924006][T23563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.934068][T23563] Call Trace: [ 625.937354][T23563] dump_stack+0x197/0x210 [ 625.941683][T23563] should_fail.cold+0x5/0xd [ 625.946311][T23563] ? fault_create_debugfs_attr+0x140/0x140 [ 625.952132][T23563] ? ___might_sleep+0x163/0x2c0 [ 625.957017][T23563] __should_failslab+0xb7/0x100 [ 625.961868][T23563] should_failslab+0x9/0x14 [ 625.966386][T23563] __kmalloc+0x2e0/0x770 [ 625.970626][T23563] ? save_stack+0x5c/0x90 [ 625.974948][T23563] ? tomoyo_encode2.part.0+0xf5/0x400 [ 625.980331][T23563] tomoyo_encode2.part.0+0xf5/0x400 [ 625.985543][T23563] ? do_syscall_64+0xfa/0x790 [ 625.990222][T23563] tomoyo_encode+0x2b/0x50 [ 625.994730][T23563] tomoyo_mount_acl+0xe0/0x840 [ 626.000616][T23563] ? debug_check_no_obj_freed+0x20a/0x441 [ 626.006339][T23563] ? __kasan_check_read+0x11/0x20 [ 626.011364][T23563] ? mark_lock+0xc2/0x1220 [ 626.015794][T23563] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 626.021344][T23563] ? __kasan_check_read+0x11/0x20 [ 626.026352][T23563] ? __lock_acquire+0x8a0/0x4a00 [ 626.031275][T23563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.037945][T23563] ? debug_smp_processor_id+0x33/0x18a [ 626.043404][T23563] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 626.049567][T23563] ? lock_acquire+0x190/0x410 [ 626.054230][T23563] ? tomoyo_mount_permission+0x10a/0x400 [ 626.059861][T23563] tomoyo_mount_permission+0x16a/0x400 [ 626.065313][T23563] ? tomoyo_mount_permission+0x10a/0x400 [ 626.070932][T23563] ? tomoyo_mount_acl+0x840/0x840 [ 626.075957][T23563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 626.082449][T23563] ? strncpy_from_user+0x2d1/0x410 [ 626.087550][T23563] tomoyo_sb_mount+0x35/0x40 [ 626.092141][T23563] security_sb_mount+0x87/0xd0 [ 626.096897][T23563] do_mount+0x1d4/0x1b50 [ 626.101130][T23563] ? copy_mount_string+0x40/0x40 [ 626.106058][T23563] ? _copy_from_user+0x12c/0x1a0 [ 626.110987][T23563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 626.117217][T23563] __x64_sys_mount+0x192/0x230 [ 626.121970][T23563] do_syscall_64+0xfa/0x790 [ 626.126465][T23563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 626.132342][T23563] RIP: 0033:0x45c6c9 [ 626.136235][T23563] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 626.155823][T23563] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 626.164242][T23563] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 626.172218][T23563] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 626.180183][T23563] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 626.188150][T23563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 626.196106][T23563] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000005 21:17:25 executing program 2 (fault-call:7 fault-nth:6): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 626.493451][T23580] FAULT_INJECTION: forcing a failure. [ 626.493451][T23580] name failslab, interval 1, probability 0, space 0, times 0 [ 626.556391][T23577] overlayfs: './file0' not a directory [ 626.603031][T23580] CPU: 0 PID: 23580 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 626.611757][T23580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.621845][T23580] Call Trace: [ 626.625157][T23580] dump_stack+0x197/0x210 [ 626.629514][T23580] should_fail.cold+0x5/0xd [ 626.634038][T23580] ? fault_create_debugfs_attr+0x140/0x140 [ 626.639867][T23580] ? ___might_sleep+0x163/0x2c0 [ 626.644762][T23580] __should_failslab+0xb7/0x100 [ 626.649628][T23580] should_failslab+0x9/0x14 [ 626.654143][T23580] __kmalloc+0x2e0/0x770 [ 626.658406][T23580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.664665][T23580] ? d_absolute_path+0x11b/0x170 [ 626.669627][T23580] ? __d_path+0x140/0x140 [ 626.673973][T23580] ? tomoyo_encode2.part.0+0xf5/0x400 [ 626.679364][T23580] tomoyo_encode2.part.0+0xf5/0x400 [ 626.680709][T23593] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 626.684579][T23580] tomoyo_encode+0x2b/0x50 [ 626.684599][T23580] tomoyo_realpath_from_path+0x19c/0x660 [ 626.684632][T23580] tomoyo_mount_acl+0x149/0x840 [ 626.684646][T23580] ? debug_check_no_obj_freed+0x20a/0x441 [ 626.684678][T23580] ? __kasan_check_read+0x11/0x20 [ 626.703312][T23593] FAT-fs (loop1): Filesystem has been set read-only [ 626.703453][T23580] ? mark_lock+0xc2/0x1220 [ 626.703477][T23580] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 626.722294][T23593] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 626.725645][T23580] ? __kasan_check_read+0x11/0x20 [ 626.725669][T23580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.725685][T23580] ? debug_smp_processor_id+0x33/0x18a [ 626.725713][T23580] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 626.725762][T23580] ? lock_acquire+0x190/0x410 [ 626.770955][T23580] ? tomoyo_mount_permission+0x10a/0x400 [ 626.776587][T23580] tomoyo_mount_permission+0x16a/0x400 [ 626.782058][T23580] ? tomoyo_mount_permission+0x10a/0x400 [ 626.787994][T23580] ? tomoyo_mount_acl+0x840/0x840 [ 626.793039][T23580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 626.799298][T23580] ? strncpy_from_user+0x2d1/0x410 [ 626.804411][T23580] tomoyo_sb_mount+0x35/0x40 [ 626.808991][T23580] security_sb_mount+0x87/0xd0 [ 626.813760][T23580] do_mount+0x1d4/0x1b50 [ 626.818005][T23580] ? copy_mount_string+0x40/0x40 [ 626.822950][T23580] ? _copy_from_user+0x12c/0x1a0 [ 626.827903][T23580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 626.834158][T23580] __x64_sys_mount+0x192/0x230 [ 626.838962][T23580] do_syscall_64+0xfa/0x790 [ 626.843551][T23580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 626.849426][T23580] RIP: 0033:0x45c6c9 [ 626.853308][T23580] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 626.872901][T23580] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 626.881299][T23580] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 626.889255][T23580] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 21:17:26 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x51d, 0x8080fffffffe) 21:17:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000240)={{0x1, 0x0, @descriptor="deb6bd186eda4a08"}}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000200)={0x0, 0xfffffffb, 0x0, &(0x7f0000000080)=0xfffffffffffff20d}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000300)={0x9a0000, 0x7f, 0x82d, r7, 0x0, &(0x7f00000002c0)={0x98091b, 0x8001, [], @ptr=0x3}}) sendto$inet6(r8, &(0x7f0000000340)="ba2061c6687a695528bdee8b97459b840100"/30, 0x1e, 0x2884, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) [ 626.897222][T23580] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 626.905211][T23580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 626.913176][T23580] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000006 [ 626.934493][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 626.934509][ T27] audit: type=1804 audit(1581974246.407:978): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/628/bus/bus/file0" dev="overlay" ino=16627 res=1 [ 626.992831][T23580] ERROR: Out of memory at tomoyo_realpath_from_path. 21:17:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x5000000) 21:17:26 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f15124", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:26 executing program 2 (fault-call:7 fault-nth:7): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 627.275872][T23612] FAULT_INJECTION: forcing a failure. [ 627.275872][T23612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 627.289119][T23612] CPU: 1 PID: 23612 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 627.297796][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.308783][T23612] Call Trace: [ 627.308808][T23612] dump_stack+0x197/0x210 [ 627.308839][T23612] should_fail.cold+0x5/0xd [ 627.308854][T23612] ? __kmalloc+0x163/0x770 [ 627.308878][T23612] ? fault_create_debugfs_attr+0x140/0x140 [ 627.308892][T23612] ? do_mount+0x1d4/0x1b50 [ 627.308912][T23612] ? __x64_sys_mount+0x192/0x230 [ 627.340510][T23612] ? do_syscall_64+0xfa/0x790 [ 627.345181][T23612] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.351270][T23612] should_fail_alloc_page+0x50/0x60 [ 627.356464][T23612] __alloc_pages_nodemask+0x1a1/0x910 [ 627.361831][T23612] ? __alloc_pages_slowpath+0x2900/0x2900 [ 627.367553][T23612] ? __kernel_text_address+0xd/0x40 [ 627.372802][T23612] cache_grow_begin+0x90/0xc60 [ 627.377559][T23612] ? trace_hardirqs_off+0x62/0x240 [ 627.382658][T23612] __kmalloc+0x6b2/0x770 [ 627.386885][T23612] ? __kmalloc+0x608/0x770 [ 627.391291][T23612] ? tomoyo_realpath_from_path+0xc5/0x660 [ 627.397003][T23612] tomoyo_realpath_from_path+0xc5/0x660 [ 627.402543][T23612] tomoyo_mount_acl+0x149/0x840 [ 627.407377][T23612] ? debug_check_no_obj_freed+0x20a/0x441 [ 627.413086][T23612] ? __kasan_check_read+0x11/0x20 [ 627.418127][T23612] ? mark_lock+0xc2/0x1220 [ 627.422552][T23612] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 627.428097][T23612] ? __kasan_check_read+0x11/0x20 [ 627.433135][T23612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 627.439369][T23612] ? debug_smp_processor_id+0x33/0x18a [ 627.444825][T23612] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 627.450993][T23612] ? lock_acquire+0x190/0x410 [ 627.455657][T23612] ? tomoyo_mount_permission+0x10a/0x400 [ 627.461291][T23612] tomoyo_mount_permission+0x16a/0x400 [ 627.466745][T23612] ? tomoyo_mount_permission+0x10a/0x400 [ 627.472365][T23612] ? tomoyo_mount_acl+0x840/0x840 [ 627.477393][T23612] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 627.483616][T23612] ? strncpy_from_user+0x2d1/0x410 [ 627.488721][T23612] tomoyo_sb_mount+0x35/0x40 [ 627.493303][T23612] security_sb_mount+0x87/0xd0 [ 627.498057][T23612] do_mount+0x1d4/0x1b50 [ 627.502708][T23612] ? copy_mount_string+0x40/0x40 [ 627.507644][T23612] ? _copy_from_user+0x12c/0x1a0 [ 627.512582][T23612] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 627.518952][T23612] __x64_sys_mount+0x192/0x230 [ 627.523719][T23612] do_syscall_64+0xfa/0x790 [ 627.528245][T23612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.534136][T23612] RIP: 0033:0x45c6c9 [ 627.538023][T23612] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 627.557613][T23612] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 627.566012][T23612] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 627.573969][T23612] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 627.581924][T23612] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 627.589897][T23612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 627.597851][T23612] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000007 [ 627.615439][T23605] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 627.634548][T23605] FAT-fs (loop1): Filesystem has been set read-only [ 627.669615][T23605] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:27 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x522, 0x8080fffffffe) [ 627.703676][T23620] overlayfs: './file0' not a directory [ 627.723859][ T27] audit: type=1804 audit(1581974247.197:979): pid=23624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/629/bus/bus/file0" dev="overlay" ino=16574 res=1 21:17:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6000000) 21:17:27 executing program 2 (fault-call:7 fault-nth:8): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f8, 0x0, 0x0, 0x0, 0x0, "", [@generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x7f8}], 0x1}, 0x0) 21:17:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3d}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0x6, 0x0, [0x1b, 0x17]}, {0xa, 0x0, [0x20, 0x15, 0xe, 0x15, 0x1a, 0xe]}, {0x6, 0x0, [0x9, 0x1d]}, {0x6, 0x0, [0x14, 0x7]}, {0x9, 0x0, [0x8, 0x14, 0x7, 0x7, 0x1e]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x240400c1}, 0x20000040) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xfffffffffffffef2, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082bbd7000fcdbdf25180000000a0006000180c200000000000a0001000000010000000c009900c751ff79a128ff03000000080001000200580d00001a00ef77ca1f13a8000008000100030000000a001a00ffffffffffff00000a001a00fffffffffffdfbdb879454eb5c56b5e6481727753d9a15d1b0a6503d4de2af5f698e8ba58025c3d73a46bd7ce7ce85f115df2c7cfb96502cdfd71db40d03cd4cf0a2e280ef024bb454e3f01eaa83190886b26fdec3b5d839e47170873a4f15d9b9a2eb0821f16ad4cb2db55febed"], 0x78}}, 0xc99ba8d289a8db0e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 628.045049][T23644] FAULT_INJECTION: forcing a failure. [ 628.045049][T23644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.058329][T23644] CPU: 1 PID: 23644 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 21:17:27 executing program 2 (fault-call:7 fault-nth:9): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 628.058340][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:17:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7000000) 21:17:27 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x582, 0x8080fffffffe) [ 628.058346][T23644] Call Trace: [ 628.058371][T23644] dump_stack+0x197/0x210 [ 628.058401][T23644] should_fail.cold+0x5/0xd 21:17:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 628.058417][T23644] ? __kmalloc+0x163/0x770 21:17:27 executing program 2 (fault-call:7 fault-nth:10): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 628.058444][T23644] ? fault_create_debugfs_attr+0x140/0x140 [ 628.058458][T23644] ? do_mount+0x1d4/0x1b50 [ 628.058473][T23644] ? __x64_sys_mount+0x192/0x230 [ 628.058490][T23644] ? do_syscall_64+0xfa/0x790 21:17:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:28 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x584, 0x8080fffffffe) [ 628.058506][T23644] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.058537][T23644] should_fail_alloc_page+0x50/0x60 21:17:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8000000) [ 628.058554][T23644] __alloc_pages_nodemask+0x1a1/0x910 [ 628.058581][T23644] ? __alloc_pages_slowpath+0x2900/0x2900 [ 628.058601][T23644] ? __kernel_text_address+0xd/0x40 [ 628.058648][T23644] cache_grow_begin+0x90/0xc60 [ 628.058671][T23644] ? trace_hardirqs_off+0x62/0x240 [ 628.058695][T23644] __kmalloc+0x6b2/0x770 [ 628.058711][T23644] ? __kmalloc+0x608/0x770 [ 628.058734][T23644] ? tomoyo_realpath_from_path+0xc5/0x660 [ 628.058757][T23644] tomoyo_realpath_from_path+0xc5/0x660 [ 628.058789][T23644] tomoyo_mount_acl+0x149/0x840 [ 628.058803][T23644] ? debug_check_no_obj_freed+0x20a/0x441 [ 628.058826][T23644] ? __kasan_check_read+0x11/0x20 [ 628.058840][T23644] ? mark_lock+0xc2/0x1220 [ 628.058859][T23644] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 628.058877][T23644] ? __kasan_check_read+0x11/0x20 [ 628.058896][T23644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.058911][T23644] ? debug_smp_processor_id+0x33/0x18a [ 628.058932][T23644] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 628.058983][T23644] ? lock_acquire+0x190/0x410 [ 628.058999][T23644] ? tomoyo_mount_permission+0x10a/0x400 [ 628.059030][T23644] tomoyo_mount_permission+0x16a/0x400 [ 628.059045][T23644] ? tomoyo_mount_permission+0x10a/0x400 [ 628.059063][T23644] ? tomoyo_mount_acl+0x840/0x840 [ 628.059103][T23644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 628.059118][T23644] ? strncpy_from_user+0x2d1/0x410 [ 628.059139][T23644] tomoyo_sb_mount+0x35/0x40 [ 628.059159][T23644] security_sb_mount+0x87/0xd0 [ 628.059183][T23644] do_mount+0x1d4/0x1b50 [ 628.059212][T23644] ? copy_mount_string+0x40/0x40 [ 628.059239][T23644] ? _copy_from_user+0x12c/0x1a0 [ 628.059264][T23644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 628.059285][T23644] __x64_sys_mount+0x192/0x230 [ 628.059310][T23644] do_syscall_64+0xfa/0x790 [ 628.059335][T23644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.059347][T23644] RIP: 0033:0x45c6c9 [ 628.059364][T23644] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.059373][T23644] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.059388][T23644] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 628.059397][T23644] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 628.059407][T23644] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 628.059415][T23644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 628.059424][T23644] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000008 21:17:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f8, 0x0, 0x0, 0x0, 0x0, "", [@generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x7f8}], 0x1}, 0x0) 21:17:28 executing program 2 (fault-call:7 fault-nth:11): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '!mime_type'}], 0xa, "cbb35bacf2daa20525a826815bde07b7f1f567be6adc3bb12171835cbae29c9a68d34e9c0627c0375fb27322b9db7ec6ba5da644e1e2e01717d27ffb8e50e6e94f8cba2df0"}, 0x5c) r5 = dup(r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000002c0)={0x1000, &(0x7f0000000280), 0x0, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$llc(r5, &(0x7f0000000080)={0x1a, 0x310, 0x4, 0xdd, 0x9, 0x1, @broadcast}, 0x10) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) [ 628.137778][T23650] overlayfs: './file0' not a directory [ 628.140704][ T27] audit: type=1804 audit(1581974247.607:980): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/630/bus/bus/file0" dev="overlay" ino=16549 res=1 [ 628.361576][T23662] FAULT_INJECTION: forcing a failure. [ 628.361576][T23662] name failslab, interval 1, probability 0, space 0, times 0 [ 628.361597][T23662] CPU: 0 PID: 23662 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 628.361607][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.361613][T23662] Call Trace: [ 628.361636][T23662] dump_stack+0x197/0x210 [ 628.361664][T23662] should_fail.cold+0x5/0xd [ 628.361689][T23662] ? fault_create_debugfs_attr+0x140/0x140 [ 628.361713][T23662] ? ___might_sleep+0x163/0x2c0 [ 628.361735][T23662] __should_failslab+0xb7/0x100 [ 628.361751][T23662] should_failslab+0x9/0x14 [ 628.361766][T23662] kmem_cache_alloc_trace+0x2d3/0x790 [ 628.361783][T23662] ? lockdep_init_map+0x1be/0x6d0 [ 628.361814][T23662] legacy_init_fs_context+0x48/0xe0 [ 628.361832][T23662] ? generic_parse_monolithic+0x200/0x200 [ 628.361850][T23662] alloc_fs_context+0x52d/0x890 [ 628.361880][T23662] fs_context_for_mount+0x25/0x30 [ 628.361898][T23662] do_mount+0x11b2/0x1b50 [ 628.361925][T23662] ? copy_mount_string+0x40/0x40 [ 628.361951][T23662] ? _copy_from_user+0x12c/0x1a0 [ 628.361973][T23662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 628.361999][T23662] __x64_sys_mount+0x192/0x230 [ 628.362024][T23662] do_syscall_64+0xfa/0x790 [ 628.362049][T23662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.362061][T23662] RIP: 0033:0x45c6c9 [ 628.362078][T23662] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.362087][T23662] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.362112][T23662] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 21:17:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 628.362122][T23662] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 628.362132][T23662] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 628.362142][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 628.362152][T23662] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 0000000000000009 [ 628.592983][T23670] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 628.592997][T23670] FAT-fs (loop1): Filesystem has been set read-only [ 628.593144][T23670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 628.597036][T23675] overlayfs: './file0' not a directory [ 628.605391][ T27] audit: type=1804 audit(1581974248.077:981): pid=23679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/631/bus/bus/file0" dev="overlay" ino=16723 res=1 [ 628.742518][T23684] FAULT_INJECTION: forcing a failure. [ 628.742518][T23684] name failslab, interval 1, probability 0, space 0, times 0 21:17:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 628.742539][T23684] CPU: 0 PID: 23684 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 628.742550][T23684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.742555][T23684] Call Trace: [ 628.742579][T23684] dump_stack+0x197/0x210 [ 628.742611][T23684] should_fail.cold+0x5/0xd [ 628.742639][T23684] ? fault_create_debugfs_attr+0x140/0x140 [ 628.742662][T23684] ? ___might_sleep+0x163/0x2c0 [ 628.742685][T23684] __should_failslab+0xb7/0x100 [ 628.742702][T23684] should_failslab+0x9/0x14 [ 628.742717][T23684] __kmalloc+0x2e0/0x770 [ 628.742750][T23684] ? tomoyo_encode2.part.0+0xf5/0x400 [ 628.742775][T23684] tomoyo_encode2.part.0+0xf5/0x400 [ 628.742791][T23684] ? __get_fs_type+0x9a/0xd0 [ 628.742813][T23684] tomoyo_encode+0x2b/0x50 [ 628.742829][T23684] tomoyo_mount_acl+0x320/0x840 [ 628.742843][T23684] ? debug_check_no_obj_freed+0x20a/0x441 [ 628.742868][T23684] ? mark_lock+0xc2/0x1220 [ 628.742886][T23684] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 628.742908][T23684] ? __kasan_check_read+0x11/0x20 21:17:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xf6ffffff) [ 628.742929][T23684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.742944][T23684] ? debug_smp_processor_id+0x33/0x18a [ 628.743002][T23684] ? lock_acquire+0x190/0x410 [ 628.743018][T23684] ? tomoyo_mount_permission+0x10a/0x400 [ 628.743050][T23684] tomoyo_mount_permission+0x16a/0x400 [ 628.743072][T23684] ? tomoyo_mount_permission+0x10a/0x400 [ 628.743093][T23684] ? tomoyo_mount_acl+0x840/0x840 [ 628.743136][T23684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 628.743153][T23684] ? strncpy_from_user+0x2d1/0x410 [ 628.743177][T23684] tomoyo_sb_mount+0x35/0x40 [ 628.743201][T23684] security_sb_mount+0x87/0xd0 [ 628.743228][T23684] do_mount+0x1d4/0x1b50 [ 628.743256][T23684] ? copy_mount_string+0x40/0x40 [ 628.743281][T23684] ? _copy_from_user+0x12c/0x1a0 [ 628.743306][T23684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 628.743332][T23684] __x64_sys_mount+0x192/0x230 [ 628.743356][T23684] do_syscall_64+0xfa/0x790 [ 628.743380][T23684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.743392][T23684] RIP: 0033:0x45c6c9 [ 628.743409][T23684] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.743418][T23684] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.743432][T23684] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 628.743441][T23684] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 628.743450][T23684] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 628.743457][T23684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 628.743465][T23684] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 000000000000000a [ 629.118790][ T27] audit: type=1804 audit(1581974248.587:982): pid=23705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/632/bus/bus/file0" dev="overlay" ino=16544 res=1 [ 629.133488][T23703] overlayfs: './file0' not a directory 21:17:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 629.337934][T23711] FAULT_INJECTION: forcing a failure. [ 629.337934][T23711] name failslab, interval 1, probability 0, space 0, times 0 [ 629.869293][T23711] CPU: 0 PID: 23711 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 629.879122][T23711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.889184][T23711] Call Trace: [ 629.892488][T23711] dump_stack+0x197/0x210 [ 629.896840][T23711] should_fail.cold+0x5/0xd [ 629.902386][T23711] ? fault_create_debugfs_attr+0x140/0x140 [ 629.908226][T23711] ? ___might_sleep+0x163/0x2c0 [ 629.913090][T23711] __should_failslab+0xb7/0x100 [ 629.917967][T23711] should_failslab+0x9/0x14 [ 629.922483][T23711] kmem_cache_alloc_trace+0x2d3/0x790 [ 629.927873][T23711] alloc_fs_context+0x5b/0x890 [ 629.932645][T23711] ? _raw_read_unlock+0x28/0x40 [ 629.937507][T23711] fs_context_for_mount+0x25/0x30 [ 629.942547][T23711] do_mount+0x11b2/0x1b50 [ 629.946893][T23711] ? copy_mount_string+0x40/0x40 [ 629.951833][T23711] ? _copy_from_user+0x12c/0x1a0 [ 629.956783][T23711] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 629.963027][T23711] __x64_sys_mount+0x192/0x230 [ 629.967798][T23711] do_syscall_64+0xfa/0x790 [ 629.972320][T23711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.978224][T23711] RIP: 0033:0x45c6c9 [ 629.982134][T23711] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:17:29 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x587, 0x8080fffffffe) [ 630.001740][T23711] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 630.010158][T23711] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 630.018133][T23711] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 630.026115][T23711] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 630.034107][T23711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 630.042076][T23711] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 000000000000000b 21:17:29 executing program 2 (fault-call:7 fault-nth:12): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000200)=0x400, 0x4) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r3, 0x19}, 0x10) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x7f8, 0x0, 0x0, 0x0, 0x0, "", [@generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x7f8}], 0x1}, 0x0) 21:17:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 630.320936][T23734] overlayfs: './file0' not a directory [ 630.405673][ T27] audit: type=1804 audit(1581974249.877:983): pid=23753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/633/bus/bus/file0" dev="overlay" ino=16519 res=1 [ 630.460210][T23747] FAULT_INJECTION: forcing a failure. [ 630.460210][T23747] name failslab, interval 1, probability 0, space 0, times 0 [ 630.474593][T23747] CPU: 1 PID: 23747 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 630.483287][T23747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.493458][T23747] Call Trace: [ 630.496767][T23747] dump_stack+0x197/0x210 [ 630.501132][T23747] should_fail.cold+0x5/0xd 21:17:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 630.505665][T23747] ? fault_create_debugfs_attr+0x140/0x140 [ 630.511493][T23747] ? ___might_sleep+0x163/0x2c0 [ 630.516375][T23747] __should_failslab+0xb7/0x100 [ 630.521248][T23747] should_failslab+0x9/0x14 [ 630.525771][T23747] kmem_cache_alloc_trace+0x2d3/0x790 [ 630.531161][T23747] ? lockdep_init_map+0x1be/0x6d0 [ 630.536219][T23747] legacy_init_fs_context+0x48/0xe0 [ 630.541431][T23747] ? generic_parse_monolithic+0x200/0x200 [ 630.547523][T23747] alloc_fs_context+0x52d/0x890 [ 630.552402][T23747] fs_context_for_mount+0x25/0x30 [ 630.557445][T23747] do_mount+0x11b2/0x1b50 [ 630.561800][T23747] ? copy_mount_string+0x40/0x40 [ 630.566768][T23747] ? _copy_from_user+0x12c/0x1a0 [ 630.571726][T23747] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 630.578084][T23747] __x64_sys_mount+0x192/0x230 [ 630.582869][T23747] do_syscall_64+0xfa/0x790 [ 630.587659][T23747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.593549][T23747] RIP: 0033:0x45c6c9 [ 630.597602][T23747] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 630.617233][T23747] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 630.625646][T23747] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 630.633798][T23747] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 630.641855][T23747] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 630.650137][T23747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:17:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfeffffff) [ 630.658602][T23747] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 000000000000000c 21:17:30 executing program 2 (fault-call:7 fault-nth:13): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:30 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x588, 0x8080fffffffe) 21:17:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:30 executing program 0: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x51d, 0x8080fffffffe) [ 630.956688][T23765] overlayfs: './file0' not a directory [ 630.979239][ T27] audit: type=1804 audit(1581974250.447:984): pid=23770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/634/bus/bus/file0" dev="overlay" ino=16525 res=1 [ 631.051824][T23773] FAULT_INJECTION: forcing a failure. [ 631.051824][T23773] name failslab, interval 1, probability 0, space 0, times 0 [ 631.079671][T23773] CPU: 1 PID: 23773 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 631.088395][T23773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.098573][T23773] Call Trace: [ 631.101883][T23773] dump_stack+0x197/0x210 [ 631.106328][T23773] should_fail.cold+0x5/0xd [ 631.110882][T23773] ? fault_create_debugfs_attr+0x140/0x140 [ 631.116701][T23773] ? ___might_sleep+0x163/0x2c0 [ 631.121641][T23773] __should_failslab+0xb7/0x100 [ 631.126518][T23773] should_failslab+0x9/0x14 [ 631.131022][T23773] __kmalloc_track_caller+0x2dc/0x760 [ 631.136579][T23773] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 631.142410][T23773] ? vfs_parse_fs_string+0xe1/0x170 [ 631.147700][T23773] kmemdup_nul+0x31/0xa0 [ 631.151962][T23773] vfs_parse_fs_string+0xe1/0x170 [ 631.157001][T23773] ? vfs_parse_fs_param+0x610/0x610 [ 631.162213][T23773] ? legacy_init_fs_context+0x9d/0xe0 [ 631.167627][T23773] do_mount+0x6b4/0x1b50 [ 631.171899][T23773] ? copy_mount_string+0x40/0x40 [ 631.176857][T23773] ? _copy_from_user+0x12c/0x1a0 [ 631.182470][T23773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.188816][T23773] __x64_sys_mount+0x192/0x230 [ 631.193702][T23773] do_syscall_64+0xfa/0x790 [ 631.198225][T23773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.204128][T23773] RIP: 0033:0x45c6c9 [ 631.207339][T23780] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 631.208038][T23773] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 631.221422][T23780] FAT-fs (loop1): Filesystem has been set read-only [ 631.236219][T23773] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 21:17:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xff000000) 21:17:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 631.236235][T23773] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 631.236243][T23773] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 631.236251][T23773] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 631.236264][T23773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 631.236273][T23773] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 000000000000000d 21:17:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x4000, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:30 executing program 0: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x514, 0x8080fffffffe) [ 631.344179][T23780] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:30 executing program 2 (fault-call:7 fault-nth:14): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:31 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5a9, 0x8080fffffffe) [ 631.670411][T23800] overlayfs: './file0' not a directory [ 631.693542][T23805] FAULT_INJECTION: forcing a failure. [ 631.693542][T23805] name failslab, interval 1, probability 0, space 0, times 0 [ 631.699368][ T27] audit: type=1804 audit(1581974251.167:985): pid=23810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/635/bus/bus/file0" dev="overlay" ino=16659 res=1 [ 631.751742][T23805] CPU: 0 PID: 23805 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 631.760488][T23805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.770611][T23805] Call Trace: [ 631.773901][T23805] dump_stack+0x197/0x210 [ 631.778340][T23805] should_fail.cold+0x5/0xd [ 631.782857][T23805] ? fault_create_debugfs_attr+0x140/0x140 [ 631.788771][T23805] ? ___might_sleep+0x163/0x2c0 [ 631.793769][T23805] __should_failslab+0xb7/0x100 [ 631.798709][T23805] should_failslab+0x9/0x14 [ 631.803230][T23805] kmem_cache_alloc_trace+0x2d3/0x790 [ 631.808610][T23805] ? lock_downgrade+0x920/0x920 [ 631.813482][T23805] ? rwlock_bug.part.0+0x90/0x90 [ 631.818434][T23805] alloc_super+0x55/0x910 [ 631.823479][T23805] sget+0x117/0x560 [ 631.827497][T23805] ? get_anon_bdev+0xc0/0xc0 [ 631.832280][T23805] ? ovl_show_options+0x5f0/0x5f0 [ 631.837316][T23805] mount_nodev+0x31/0x110 [ 631.841655][T23805] ovl_mount+0x2d/0x40 [ 631.845743][T23805] ? ovl_own_xattr_set+0x10/0x10 [ 631.850698][T23805] legacy_get_tree+0x108/0x220 [ 631.855486][T23805] vfs_get_tree+0x8e/0x300 [ 631.860875][T23805] do_mount+0x135a/0x1b50 [ 631.865235][T23805] ? copy_mount_string+0x40/0x40 [ 631.870326][T23805] ? _copy_from_user+0x12c/0x1a0 [ 631.875391][T23805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.881648][T23805] __x64_sys_mount+0x192/0x230 [ 631.886427][T23805] do_syscall_64+0xfa/0x790 [ 631.891092][T23805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.896996][T23805] RIP: 0033:0x45c6c9 [ 631.900903][T23805] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:17:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffff6) [ 631.920558][T23805] RSP: 002b:00007f6d47a4ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 631.928988][T23805] RAX: ffffffffffffffda RBX: 00007f6d47a4f6d4 RCX: 000000000045c6c9 [ 631.937072][T23805] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000400000 [ 631.945149][T23805] RBP: 000000000076bf20 R08: 0000000020000100 R09: 0000000000000000 [ 631.953258][T23805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 631.961247][T23805] R13: 0000000000000755 R14: 00000000004c9fb4 R15: 000000000000000e 21:17:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5766}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c804}, 0xc0) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:31 executing program 0: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x514, 0x8080fffffffe) [ 632.469748][T23829] overlayfs: './file0' not a directory 21:17:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffe) 21:17:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:32 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5b2, 0x8080fffffffe) 21:17:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 632.965729][T23854] overlayfs: './file0' not a directory 21:17:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 632.996038][ T27] audit: type=1804 audit(1581974252.467:986): pid=23856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/637/bus/bus/file0" dev="overlay" ino=16609 res=1 21:17:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000000000) 21:17:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000200)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x100000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:33 executing program 0: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x514, 0x8080fffffffe) 21:17:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x200000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 633.556771][T23880] overlayfs: './file0' not a directory 21:17:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 633.589205][ T27] audit: type=1804 audit(1581974253.057:987): pid=23884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/638/bus/bus/file0" dev="overlay" ino=16535 res=1 21:17:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100000000000000) 21:17:33 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5bf, 0x8080fffffffe) 21:17:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 634.075239][ T27] audit: type=1804 audit(1581974253.547:988): pid=23914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/639/bus/bus/file0" dev="overlay" ino=16558 res=1 21:17:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x200000000000000) 21:17:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x20010, r1, 0x8000000) r2 = dup2(r0, r0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @remote}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400003, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 634.442362][T23927] overlayfs: './file0' not a directory [ 634.467315][ T27] audit: type=1804 audit(1581974253.937:989): pid=23932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/640/bus/bus/file0" dev="overlay" ino=16556 res=1 21:17:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:34 executing program 0 (fault-call:24 fault-nth:0): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x300000000000000) 21:17:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400004, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 634.796273][T23945] overlayfs: './file0' not a directory [ 634.808984][ T27] audit: type=1804 audit(1581974254.277:990): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/641/bus/bus/file0" dev="overlay" ino=16629 res=1 [ 634.848673][T23942] FAULT_INJECTION: forcing a failure. [ 634.848673][T23942] name failslab, interval 1, probability 0, space 0, times 0 [ 634.946591][T23942] CPU: 1 PID: 23942 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 634.955830][T23942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.965891][T23942] Call Trace: [ 634.969195][T23942] dump_stack+0x197/0x210 [ 634.973550][T23942] should_fail.cold+0x5/0xd [ 634.978077][T23942] ? fault_create_debugfs_attr+0x140/0x140 [ 634.983910][T23942] ? ___might_sleep+0x163/0x2c0 [ 634.988784][T23942] __should_failslab+0xb7/0x100 [ 634.993660][T23942] should_failslab+0x9/0x14 [ 634.998176][T23942] __kmalloc+0x2e0/0x770 [ 635.002434][T23942] ? mark_held_locks+0xf0/0xf0 [ 635.007207][T23942] ? mark_lock+0xc2/0x1220 [ 635.011641][T23942] ? _parse_integer+0x190/0x190 [ 635.016501][T23942] ? tomoyo_realpath_from_path+0xc5/0x660 [ 635.022239][T23942] tomoyo_realpath_from_path+0xc5/0x660 [ 635.028338][T23942] ? tomoyo_path_number_perm+0x193/0x520 [ 635.033999][T23942] tomoyo_path_number_perm+0x1dd/0x520 [ 635.039459][T23942] ? tomoyo_path_number_perm+0x193/0x520 [ 635.045208][T23942] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 635.051027][T23942] ? __f_unlock_pos+0x19/0x20 [ 635.055803][T23942] ? __fget_files+0x359/0x520 [ 635.060505][T23942] ? ksys_dup3+0x3e0/0x3e0 [ 635.064935][T23942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 635.071184][T23942] ? fput_many+0x12c/0x1a0 [ 635.075624][T23942] tomoyo_file_ioctl+0x23/0x30 [ 635.080400][T23942] security_file_ioctl+0x77/0xc0 [ 635.085366][T23942] ksys_ioctl+0x56/0x180 [ 635.089710][T23942] __x64_sys_ioctl+0x73/0xb0 [ 635.094314][T23942] do_syscall_64+0xfa/0x790 [ 635.098841][T23942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.104740][T23942] RIP: 0033:0x45c6c9 [ 635.108645][T23942] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.128258][T23942] RSP: 002b:00007f05af400c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.136677][T23942] RAX: ffffffffffffffda RBX: 00007f05af4016d4 RCX: 000000000045c6c9 [ 635.144644][T23942] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000012 [ 635.152614][T23942] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 635.160581][T23942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 635.168557][T23942] R13: 00000000000003bf R14: 00000000004c632b R15: 0000000000000000 21:17:34 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5c0, 0x8080fffffffe) [ 635.202633][T23942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.211140][T23942] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:17:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x400000000000000) 21:17:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400005, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:34 executing program 0 (fault-call:24 fault-nth:1): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)="dda83bcc71e3362160abcbc51cc5ba226138767ad2c228beee8b09000000ef89b04d3f640537d57079c2fd099a4e186b09000000e07feb167f65808f12188d02a23257bc69ce1c10096c0f57a3112714e4773bea7f1b310b6c5a18a669a888ceaddfb3573cbabca9d8a008e31e8561ff40957283d36e4a828fab44a193b6bc5040122436ae9f449d614f582c9a6f88020565d15d6f2bb5c9e5b4af97afdc142cafa28012d9916144c22aeff0715a", 0xae, 0x400c4, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 635.453939][T23969] overlayfs: './file0' not a directory 21:17:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 635.505413][ T27] audit: type=1804 audit(1581974254.977:991): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/642/bus/bus/file0" dev="overlay" ino=16543 res=1 21:17:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400006, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x500000000000000) 21:17:35 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) [ 636.139661][T24011] overlayfs: './file0' not a directory [ 636.161370][ T27] audit: type=1804 audit(1581974255.627:992): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/643/bus/bus/file0" dev="overlay" ino=16553 res=1 [ 636.312986][T24010] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 21:17:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400007, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0xed}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r8}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r8, 0x1ff, 0x30}, 0xc) r10 = dup2(r9, r0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r11, &(0x7f0000000040)="e7a59ee1c4329798af9021526ea6db6bd8af64fb6b558b0172d0c5483805a36cded7590b940748", 0x27, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r11, &(0x7f0000000380)="ba206138767ad2c228beee8baaa77bef89b04d3f640554355b4197459b84d8bd8caee648e5f9f7a67cdf4cc2b51ddeae752d067ec0bf76ae125ae91694bee282eb9a26ba3f55027d0f225c9ed0c99f3c9ea7f92ed45f282e0bb859df9fa06bdd35befe16a6f706bb750b256700698904f1fdf60a6455517b0327387e09d11d0f12f3ec6ca0f6cafeab72e333fc", 0x8d, 0x0, 0x0, 0x0) recvfrom$inet6(r11, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) 21:17:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x600000000000000) 21:17:35 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5c2, 0x8080fffffffe) 21:17:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)="e7a59ee16b558b0172d0fd483805a36cded7590b9407484e2a94b40d2f7ef2fc86becd85c70459f2dae4ab2bd9820027243b700d9fd9061fcc17260ccd045368921db7a3a44641f69c7647d45961f8c5337b0c352fcb5da019f00c99bcb0d87d4da0ca5df302dc7269668ba374", 0x6d, 0x20048000, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ba206138767ad2c228beee8baaa77bef89b04d3f640554275b4197459b84", 0x1e, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/217, 0x45, 0x0, 0x0, 0x0) 21:17:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 636.597437][T24031] overlayfs: './file0' not a directory 21:17:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 636.711830][T24033] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x700000000000000) 21:17:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 636.809771][T24033] FAT-fs (loop1): Filesystem has been set read-only [ 636.852627][T24033] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:36 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5e0, 0x8080fffffffe) [ 637.028974][T24056] overlayfs: './file0' not a directory 21:17:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400009, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 637.062471][ T27] audit: type=1804 audit(1581974256.527:993): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/645/bus/bus/file0" dev="overlay" ino=16612 res=1 21:17:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x800000000000000) 21:17:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x10, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:37 executing program 5 (fault-call:9 fault-nth:0): syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 637.537252][ T27] audit: type=1804 audit(1581974257.007:994): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/646/bus/file0" dev="sda1" ino=16562 res=1 [ 637.608389][T24096] overlayfs: failed to resolve './file0': -2 21:17:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xf6ffffff00000000) 21:17:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 637.816270][T24105] FAULT_INJECTION: forcing a failure. [ 637.816270][T24105] name failslab, interval 1, probability 0, space 0, times 0 [ 637.921170][T24105] CPU: 0 PID: 24105 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 637.929883][T24105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.939943][T24105] Call Trace: [ 637.943250][T24105] dump_stack+0x197/0x210 [ 637.947605][T24105] should_fail.cold+0x5/0xd [ 637.952128][T24105] ? fault_create_debugfs_attr+0x140/0x140 [ 637.957952][T24105] ? ___might_sleep+0x163/0x2c0 [ 637.962823][T24105] __should_failslab+0xb7/0x100 [ 637.967685][T24105] should_failslab+0x9/0x14 [ 637.973060][T24105] kmem_cache_alloc_trace+0x2d3/0x790 [ 637.973100][T24105] ? _parse_integer+0x139/0x190 [ 637.973136][T24105] alloc_pipe_info+0x10e/0x510 [ 637.973168][T24105] splice_direct_to_actor+0x80e/0xa30 [ 637.994353][T24105] ? __lock_acquire+0x16f2/0x4a00 [ 637.999391][T24105] ? generic_pipe_buf_nosteal+0x10/0x10 [ 638.004959][T24105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.011209][T24105] ? do_splice_to+0x180/0x180 [ 638.015908][T24105] ? rw_verify_area+0x126/0x360 [ 638.020788][T24105] do_splice_direct+0x1da/0x2a0 [ 638.025585][T24115] overlayfs: './file0' not a directory [ 638.025646][T24105] ? splice_direct_to_actor+0xa30/0xa30 [ 638.036625][T24105] ? rcu_read_lock_any_held+0xcd/0xf0 [ 638.042021][T24105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.048294][T24105] ? __this_cpu_preempt_check+0x35/0x190 [ 638.053938][T24105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.060187][T24105] ? __sb_start_write+0x1e5/0x460 [ 638.065239][T24105] do_sendfile+0x597/0xd00 [ 638.069686][T24105] ? do_compat_pwritev64+0x1c0/0x1c0 [ 638.074995][T24105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 638.081299][T24105] ? _copy_from_user+0x12c/0x1a0 [ 638.086225][T24105] __x64_sys_sendfile64+0x15a/0x220 [ 638.091406][T24105] ? __ia32_sys_sendfile+0x230/0x230 [ 638.096686][T24105] ? do_syscall_64+0x26/0x790 [ 638.101371][T24105] ? lockdep_hardirqs_on+0x421/0x5e0 [ 638.106694][T24105] ? trace_hardirqs_on+0x67/0x240 [ 638.111759][T24105] do_syscall_64+0xfa/0x790 [ 638.116298][T24105] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.122179][T24105] RIP: 0033:0x45c6c9 [ 638.126054][T24105] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 638.145637][T24105] RSP: 002b:00007faf867d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 638.154034][T24105] RAX: ffffffffffffffda RBX: 00007faf867da6d4 RCX: 000000000045c6c9 [ 638.161985][T24105] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000004 [ 638.170014][T24105] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 638.178145][T24105] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000007 [ 638.186125][T24105] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000000 21:17:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfeffffff00000000) [ 638.202807][ T27] audit: type=1804 audit(1581974257.387:995): pid=24122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/647/bus/bus/file0" dev="overlay" ino=16721 res=1 21:17:37 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5f6, 0x8080fffffffe) 21:17:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x1277, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000b, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:37 executing program 5 (fault-call:9 fault-nth:1): syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 638.678367][T24147] overlayfs: './file0' not a directory 21:17:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000c, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xff00000000000000) 21:17:38 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5f7, 0x8080fffffffe) [ 638.922663][T24164] FAULT_INJECTION: forcing a failure. [ 638.922663][T24164] name failslab, interval 1, probability 0, space 0, times 0 [ 638.943146][T24164] CPU: 1 PID: 24164 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 638.951852][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.961919][T24164] Call Trace: [ 638.965232][T24164] dump_stack+0x197/0x210 [ 638.969592][T24164] should_fail.cold+0x5/0xd [ 638.974117][T24164] ? fault_create_debugfs_attr+0x140/0x140 [ 638.979950][T24164] ? ___might_sleep+0x163/0x2c0 [ 638.984823][T24164] __should_failslab+0xb7/0x100 [ 638.989716][T24164] should_failslab+0x9/0x14 [ 638.994233][T24164] __kmalloc+0x2e0/0x770 [ 638.998485][T24164] ? kmem_cache_alloc_trace+0x397/0x790 [ 639.001057][T24172] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 639.005016][T24164] ? alloc_pipe_info+0x1ee/0x510 [ 639.005065][T24164] alloc_pipe_info+0x1ee/0x510 [ 639.005093][T24164] splice_direct_to_actor+0x80e/0xa30 [ 639.005112][T24164] ? __lock_acquire+0x16f2/0x4a00 [ 639.005128][T24164] ? generic_pipe_buf_nosteal+0x10/0x10 [ 639.005154][T24164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.005170][T24164] ? do_splice_to+0x180/0x180 [ 639.005198][T24164] ? rw_verify_area+0x126/0x360 [ 639.005224][T24164] do_splice_direct+0x1da/0x2a0 [ 639.005246][T24164] ? splice_direct_to_actor+0xa30/0xa30 [ 639.005262][T24164] ? rcu_read_lock_any_held+0xcd/0xf0 [ 639.005288][T24164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.005305][T24164] ? __this_cpu_preempt_check+0x35/0x190 [ 639.005324][T24164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.005340][T24164] ? __sb_start_write+0x1e5/0x460 [ 639.005364][T24164] do_sendfile+0x597/0xd00 [ 639.005404][T24164] ? do_compat_pwritev64+0x1c0/0x1c0 [ 639.005433][T24164] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 639.005449][T24164] ? _copy_from_user+0x12c/0x1a0 [ 639.005473][T24164] __x64_sys_sendfile64+0x15a/0x220 21:17:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 639.005493][T24164] ? __ia32_sys_sendfile+0x230/0x230 [ 639.005509][T24164] ? do_syscall_64+0x26/0x790 [ 639.005526][T24164] ? lockdep_hardirqs_on+0x421/0x5e0 [ 639.005551][T24164] ? trace_hardirqs_on+0x67/0x240 [ 639.020793][T24172] FAT-fs (loop1): Filesystem has been set read-only [ 639.024860][T24164] do_syscall_64+0xfa/0x790 [ 639.024886][T24164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.024899][T24164] RIP: 0033:0x45c6c9 [ 639.024914][T24164] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 639.024922][T24164] RSP: 002b:00007faf867b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 639.024943][T24164] RAX: ffffffffffffffda RBX: 00007faf867b96d4 RCX: 000000000045c6c9 [ 639.034039][T24172] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 639.035322][T24164] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000006 [ 639.035331][T24164] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 639.035340][T24164] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000007 [ 639.035348][T24164] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000001 21:17:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:38 executing program 5 (fault-call:9 fault-nth:2): syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x2270, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000d, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:39 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5fa, 0x8080fffffffe) 21:17:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 639.691466][T24193] overlayfs: './file0' not a directory [ 639.709962][ T27] audit: type=1804 audit(1581974259.177:996): pid=24207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/649/bus/bus/file0" dev="overlay" ino=16548 res=1 21:17:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff00000000) [ 639.748141][T24204] FAULT_INJECTION: forcing a failure. [ 639.748141][T24204] name failslab, interval 1, probability 0, space 0, times 0 21:17:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 639.850862][T24204] CPU: 1 PID: 24204 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 639.859572][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.869765][T24204] Call Trace: [ 639.873066][T24204] dump_stack+0x197/0x210 [ 639.877424][T24204] should_fail.cold+0x5/0xd [ 639.881977][T24204] ? fault_create_debugfs_attr+0x140/0x140 [ 639.887814][T24204] ? ___might_sleep+0x163/0x2c0 [ 639.892692][T24204] __should_failslab+0xb7/0x100 [ 639.897557][T24204] should_failslab+0x9/0x14 [ 639.902076][T24204] __kmalloc+0x2e0/0x770 [ 639.906454][T24204] ? kmem_cache_alloc_trace+0x397/0x790 [ 639.912021][T24204] ? _parse_integer+0x139/0x190 [ 639.916891][T24204] ? alloc_pipe_info+0x1ee/0x510 [ 639.921858][T24204] alloc_pipe_info+0x1ee/0x510 [ 639.926644][T24204] splice_direct_to_actor+0x80e/0xa30 [ 639.932030][T24204] ? __lock_acquire+0x16f2/0x4a00 [ 639.937068][T24204] ? generic_pipe_buf_nosteal+0x10/0x10 [ 639.942635][T24204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.948883][T24204] ? do_splice_to+0x180/0x180 [ 639.953573][T24204] ? rw_verify_area+0x126/0x360 [ 639.958443][T24204] do_splice_direct+0x1da/0x2a0 [ 639.963338][T24204] ? splice_direct_to_actor+0xa30/0xa30 [ 639.968885][T24204] ? rcu_read_lock_any_held+0xcd/0xf0 [ 639.974265][T24204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.980505][T24204] ? __this_cpu_preempt_check+0x35/0x190 [ 639.986131][T24204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.992386][T24204] ? __sb_start_write+0x1e5/0x460 [ 639.997414][T24204] do_sendfile+0x597/0xd00 [ 640.001841][T24204] ? do_compat_pwritev64+0x1c0/0x1c0 [ 640.007137][T24204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 640.013383][T24204] ? _copy_from_user+0x12c/0x1a0 [ 640.018328][T24204] __x64_sys_sendfile64+0x15a/0x220 [ 640.023532][T24204] ? __ia32_sys_sendfile+0x230/0x230 [ 640.028846][T24204] ? do_syscall_64+0x26/0x790 [ 640.033511][T24204] ? lockdep_hardirqs_on+0x421/0x5e0 [ 640.038908][T24204] ? trace_hardirqs_on+0x67/0x240 [ 640.043951][T24204] do_syscall_64+0xfa/0x790 [ 640.048762][T24204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 640.054644][T24204] RIP: 0033:0x45c6c9 [ 640.058592][T24204] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 640.078210][T24204] RSP: 002b:00007faf867b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 640.086619][T24204] RAX: ffffffffffffffda RBX: 00007faf867b96d4 RCX: 000000000045c6c9 21:17:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 640.094648][T24204] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000006 [ 640.102617][T24204] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 640.110675][T24204] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000009 [ 640.118640][T24204] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000002 21:17:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400010, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:39 executing program 5 (fault-call:9 fault-nth:3): syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 640.317428][T24219] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 640.390639][ T27] audit: type=1804 audit(1581974259.857:997): pid=24235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/650/bus/bus/file0" dev="overlay" ino=16709 res=1 [ 640.397916][T24219] FAT-fs (loop1): Filesystem has been set read-only [ 640.586445][T24219] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x2284, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:40 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530c8f6f436c9a71202920e4d7df3456e087332a303cc1c651d3498290b82463e9b2f5704e0280965267da091e98dcff28ebb10ef95f9e1d718dfb181a9a7c58fbc00000000000000000000f3d303ec8eba9ba664e963384b01fb9da7fcf535f7720c646c8912c7be9b22328a90f0aa7214a9f03b1722c6ca7fc4289de654693c14509d541119373ecf6362dd921cecc6d47a93"]) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000640)={r3, &(0x7f0000000540)=""/215}) chdir(&(0x7f0000000200)='./bus/file0/file0\x00') syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f00000001c0)='./file2\x00', 0x5, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)="edbf4485af6f4d8ba450cbe6f036dcbbbf68e21d08c90af0374a23e91a5a3d5ee6a9f80ba25916d45d52d93c123ca1fbf30091e4ea014aec573929cd415a0e934e0cb8a13b619b68fad28ea5ca768c225449bb9e409b207e792af3790e7198762d9987b6c4d3c1b1ed55b19c321f6f0b168ae5875a585fa2a84c63cf278af6369aa9d59d0f76f9a132ea4be6812641221be9984f", 0x94, 0x7fff}], 0x20000, &(0x7f00000003c0)='lo[\x00') syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000000)=0x9) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:40 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5fe, 0x8080fffffffe) 21:17:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400012, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 640.820466][T24258] overlayfs: failed to resolve './file0Èöô6ɧ’M}óEns2£Ìe4˜) ‚F>›/Wà( e&} ‘éÏòŽ»ï•ùá×ß±©§Å¼': -2 [ 640.836235][T24253] FAULT_INJECTION: forcing a failure. [ 640.836235][T24253] name failslab, interval 1, probability 0, space 0, times 0 21:17:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 640.927601][T24253] CPU: 0 PID: 24253 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 640.936413][T24253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.946775][T24253] Call Trace: [ 640.950086][T24253] dump_stack+0x197/0x210 [ 640.954448][T24253] should_fail.cold+0x5/0xd [ 640.958981][T24253] ? fault_create_debugfs_attr+0x140/0x140 [ 640.965055][T24253] ? mark_lock+0xc2/0x1220 [ 640.969490][T24253] __should_failslab+0xb7/0x100 [ 640.974351][T24253] should_failslab+0x9/0x14 [ 640.978859][T24253] kmem_cache_alloc+0x47/0x710 [ 640.983616][T24253] ? ___might_sleep+0x163/0x2c0 [ 640.988475][T24253] ? mempool_alloc+0x380/0x380 [ 640.993365][T24253] mempool_alloc_slab+0x47/0x60 [ 640.998203][T24253] mempool_alloc+0x169/0x380 [ 641.002796][T24253] ? __lock_acquire+0x16f2/0x4a00 [ 641.007844][T24253] ? mempool_destroy+0x40/0x40 [ 641.012682][T24253] ? fat_cache_add.part.0+0xc2/0x6e0 [ 641.018077][T24253] ? find_held_lock+0x35/0x130 [ 641.022851][T24253] ? __kasan_check_read+0x11/0x20 [ 641.027943][T24253] bio_alloc_bioset+0x3b9/0x680 [ 641.032811][T24253] ? bvec_alloc+0x2f0/0x2f0 [ 641.037418][T24253] mpage_alloc.isra.0+0x3d/0x270 [ 641.042350][T24253] __mpage_writepage+0x1372/0x19e0 [ 641.048082][T24253] ? rcu_read_lock_held+0x9c/0xb0 [ 641.053107][T24253] ? clean_buffers+0x340/0x340 [ 641.057876][T24253] ? clear_page_dirty_for_io+0x59b/0xde0 [ 641.063520][T24253] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 641.069746][T24253] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 641.075332][T24253] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 641.081315][T24253] ? clear_page_dirty_for_io+0x322/0xde0 [ 641.086969][T24253] write_cache_pages+0x80c/0x13f0 [ 641.092016][T24253] ? clean_buffers+0x340/0x340 [ 641.096783][T24253] ? clear_page_dirty_for_io+0xde0/0xde0 [ 641.102525][T24253] ? __kasan_check_read+0x11/0x20 [ 641.107636][T24253] ? mark_lock+0xc2/0x1220 [ 641.112053][T24253] ? __kasan_check_read+0x11/0x20 [ 641.117075][T24253] ? __lock_acquire+0x8a0/0x4a00 [ 641.122003][T24253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.128237][T24253] ? __kasan_check_read+0x11/0x20 [ 641.133264][T24253] ? mark_lock+0xc2/0x1220 [ 641.137687][T24253] ? fat_add_cluster+0x100/0x100 [ 641.142624][T24253] mpage_writepages+0xe2/0x240 [ 641.147380][T24253] ? mpage_end_io+0x2d0/0x2d0 [ 641.152060][T24253] ? mark_lock+0xc2/0x1220 [ 641.156472][T24253] ? fat_add_cluster+0x100/0x100 [ 641.161420][T24253] ? wbc_attach_and_unlock_inode+0x612/0x9d0 [ 641.167394][T24253] ? find_held_lock+0x35/0x130 [ 641.173111][T24253] ? wbc_attach_and_unlock_inode+0x612/0x9d0 [ 641.179197][T24253] ? fat_readpages+0x40/0x40 [ 641.183775][T24253] fat_writepages+0x25/0x30 [ 641.188268][T24253] do_writepages+0xfa/0x2a0 [ 641.192770][T24253] ? lock_downgrade+0x920/0x920 [ 641.197625][T24253] ? page_writeback_cpu_online+0x20/0x20 [ 641.203266][T24253] ? do_raw_spin_unlock+0x181/0x270 [ 641.208471][T24253] ? _raw_spin_unlock+0x28/0x40 [ 641.213326][T24253] ? wbc_attach_and_unlock_inode+0x617/0x9d0 [ 641.219316][T24253] __filemap_fdatawrite_range+0x2bc/0x3b0 [ 641.225028][T24253] ? delete_from_page_cache_batch+0xfe0/0xfe0 [ 641.231115][T24253] ? find_held_lock+0x35/0x130 [ 641.235879][T24253] ? generic_file_write_iter+0x42b/0x68e [ 641.241625][T24253] file_write_and_wait_range+0x175/0x210 [ 641.247356][T24253] __generic_file_fsync+0x79/0x200 [ 641.252472][T24253] fat_file_fsync+0x78/0x210 [ 641.257939][T24253] ? fat_free_clusters.cold+0x2f/0x2f [ 641.263325][T24253] vfs_fsync_range+0x141/0x230 [ 641.268087][T24253] generic_file_write_iter+0x4ea/0x68e [ 641.273563][T24253] ? __generic_file_write_iter+0x630/0x630 [ 641.279364][T24253] ? common_file_perm+0x2f3/0x940 [ 641.284419][T24253] do_iter_readv_writev+0x5f8/0x8f0 [ 641.289642][T24253] ? no_seek_end_llseek_size+0x70/0x70 [ 641.295094][T24253] ? apparmor_file_permission+0x27/0x30 [ 641.300653][T24253] ? rw_verify_area+0x126/0x360 [ 641.305510][T24253] do_iter_write+0x184/0x610 [ 641.310107][T24253] ? __kmalloc+0x608/0x770 [ 641.314534][T24253] vfs_iter_write+0x77/0xb0 [ 641.319034][T24253] iter_file_splice_write+0x717/0xc10 [ 641.324426][T24253] ? page_cache_pipe_buf_release+0x290/0x290 [ 641.330434][T24253] ? rw_verify_area+0x126/0x360 [ 641.335292][T24253] ? page_cache_pipe_buf_release+0x290/0x290 [ 641.341405][T24253] direct_splice_actor+0x123/0x190 [ 641.346516][T24253] splice_direct_to_actor+0x3b4/0xa30 [ 641.351905][T24253] ? generic_pipe_buf_nosteal+0x10/0x10 [ 641.357455][T24253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.363713][T24253] ? do_splice_to+0x180/0x180 [ 641.368402][T24253] ? rw_verify_area+0x126/0x360 [ 641.373259][T24253] do_splice_direct+0x1da/0x2a0 [ 641.378153][T24253] ? splice_direct_to_actor+0xa30/0xa30 [ 641.383694][T24253] ? rcu_read_lock_any_held+0xcd/0xf0 [ 641.389089][T24253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.395322][T24253] ? __this_cpu_preempt_check+0x35/0x190 [ 641.400981][T24253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.407565][T24253] ? __sb_start_write+0x1e5/0x460 [ 641.412613][T24253] do_sendfile+0x597/0xd00 [ 641.417052][T24253] ? do_compat_pwritev64+0x1c0/0x1c0 [ 641.422352][T24253] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 641.428582][T24253] ? _copy_from_user+0x12c/0x1a0 [ 641.433528][T24253] __x64_sys_sendfile64+0x15a/0x220 [ 641.438735][T24253] ? __ia32_sys_sendfile+0x230/0x230 [ 641.444018][T24253] ? do_syscall_64+0x26/0x790 [ 641.448704][T24253] ? lockdep_hardirqs_on+0x421/0x5e0 [ 641.453998][T24253] ? trace_hardirqs_on+0x67/0x240 [ 641.459031][T24253] do_syscall_64+0xfa/0x790 [ 641.463540][T24253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.469441][T24253] RIP: 0033:0x45c6c9 [ 641.473346][T24253] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 641.492956][T24253] RSP: 002b:00007faf867d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 641.501366][T24253] RAX: ffffffffffffffda RBX: 00007faf867da6d4 RCX: 000000000045c6c9 [ 641.509332][T24253] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000004 [ 641.517303][T24253] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 641.525269][T24253] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000007 [ 641.533230][T24253] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000003 21:17:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400014, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 641.605534][T24273] overlayfs: failed to resolve './file0Èöô6ɧ’M}óEns2£Ìe4˜) ‚F>›/Wà( e&} ‘éÏòŽ»ï•ùá×ß±©§Å¼': -2 21:17:41 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400030, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:41 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x600, 0x8080fffffffe) 21:17:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r11) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYRESOCT=r3], @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRESDEC=0x0], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="c66d66a7e35c2e0a9eb959be9ca5dec9b89fc0d9006045c52a096b4369549f6a52fee39f2fb5e805afe8e2e8269694647e9a9367d946a3133d5a74a9f217231127fe27b8a6c1cc08f0", @ANYRES16=r7, @ANYRESOCT=r8, @ANYRES16=r10], @ANYRESOCT]) chdir(&(0x7f00000002c0)='./bus\x00') r12 = getegid() setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c141b46ff57aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) r13 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r13, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r14) r15 = getegid() setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c141b46ff57aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) r16 = geteuid() chown(&(0x7f0000000000)='./file0\x00', r16, r15) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 642.208884][T24306] overlayfs: unrecognized mount option "€" or missing value [ 642.246852][T24312] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 642.255864][T24312] FAT-fs (loop1): Filesystem has been set read-only [ 642.279904][ T27] audit: type=1804 audit(1581974261.747:998): pid=24306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/652/bus/file0" dev="sda1" ino=16549 res=1 [ 642.321261][T24312] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 642.368332][T24322] overlayfs: unrecognized mount option "€" or missing value [ 642.419883][ T27] audit: type=1804 audit(1581974261.797:999): pid=24306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/652/bus/file0" dev="sda1" ino=16549 res=1 21:17:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4b45, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x64) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x32}, 0x54}}, 0x101, 0x1f}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e23, 0x1, @empty, 0x5}}}, 0x84) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:41 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x700, 0x8080fffffffe) 21:17:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40005c, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 642.526475][ T27] audit: type=1804 audit(1581974261.867:1000): pid=24319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/652/bus/bus/file0" dev="sda1" ino=16580 res=1 [ 642.667497][ T27] audit: type=1804 audit(1581974261.867:1001): pid=24319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/652/bus/bus/file0" dev="sda1" ino=16580 res=1 21:17:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000300)={'filter\x00', 0x7c, "925ab6236d22c1a5c0b3501988083c1fc87c43da1b659e8e77834e9bd7117b3285e454c3b2e1bb6d855d667eb32c19145462f90e45097d29a881a6a121e76820864cedd1649a2d2633df67049617c0f2c8fde625b5bba5e36b393ac2f365f85cee6aaf206f41d0fc57e19344ffce3242ad7e269d07ae5100d3939aff"}, &(0x7f00000001c0)=0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:42 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x300, 0x8080fffffffe) 21:17:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 642.881168][T24339] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 642.956011][T24339] FAT-fs (loop1): Filesystem has been set read-only [ 642.985437][T24339] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) 21:17:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x4000f0, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 643.014682][T24339] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 643.024779][T24339] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) 21:17:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:42 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xa00, 0x8080fffffffe) [ 643.202178][T24360] overlayfs: './file0' not a directory [ 643.212043][ T27] audit: type=1804 audit(1581974262.677:1002): pid=24370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/654/bus/bus/file0" dev="overlay" ino=16674 res=1 [ 643.325626][T24377] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 643.335882][T24377] FAT-fs (loop1): Filesystem has been set read-only [ 643.344653][T24377] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 643.354055][T24377] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 643.354163][T24363] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa3) [ 643.362396][T24377] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) 21:17:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4b4c, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f00000001c0)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065722f66696c6530000000000026d9c990c13fec3d8aba020f755d3ce62cb3a9d009f7bc39021219d56af4395e40917160a61ace6dba63b3c041e85ba96615afae4157c7b609c50f3229458d7c0700bc1ff3a9b8905b0f0c9ed3e30d2eeb6d"]) chdir(&(0x7f00000002c0)='./bus\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7f, 0xfd8}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:42 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xd00, 0x8080fffffffe) 21:17:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400300, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 643.513092][T24363] FAT-fs (loop5): Filesystem has been set read-only [ 643.533333][T24363] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa3) [ 643.560768][T24363] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa3) [ 643.592287][T24363] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa3) [ 643.607507][T24392] overlayfs: unrecognized mount option "upper/file0" or missing value [ 643.658206][ T27] audit: type=1804 audit(1581974263.127:1003): pid=24392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/655/bus/file0" dev="sda1" ino=16612 res=1 21:17:43 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x502, 0x8080fffffffe) 21:17:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:43 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x551582, 0x40) [ 643.887839][T24405] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 643.929630][T24413] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 643.944125][T24413] FAT-fs (loop5): Filesystem has been set read-only [ 643.956531][T24405] FAT-fs (loop1): Filesystem has been set read-only 21:17:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400408, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 643.981960][T24416] overlayfs: './file0' not a directory [ 644.033078][T24413] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) [ 644.053248][T24405] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) 21:17:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x30) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x17, 0x249e1e, 0x8000000001}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f00000000c0), &(0x7f00000001c0), 0x2}, 0x20) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6c6f7765723d2e2f6275732c776f726b6469723d2e2f66696c65312c1e607065726469723d2e2f66696c6530346e5b0eea8a791867c48f335fd99589d95fa5a8b8a5597622cd70d797ab4b3f121dbf8b2d7c2171375640da2979a7d2f5519daf09227b60bfe061e27c83b651f03c0e72c4"]) chdir(&(0x7f00000002c0)='./bus\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = dup(r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) statx(r8, &(0x7f0000000000)='./file0\x00', 0x6000, 0xfff, &(0x7f0000000300)) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 644.083295][T24405] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) [ 644.103198][T24405] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aa3) 21:17:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:43 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xf00, 0x8080fffffffe) 21:17:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4c00, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:43 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x503, 0x8080fffffffe) 21:17:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400500, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:44 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6c6f7765726469723d2f66696c65312c75707065726469723d2e2f66696c65300000000000000000000000000000005b6bfa4589346cc91e6295de31e0d883e890064cb7690af13efbd0d1f0dd6749b62a1de2169bbe81af9448530bd85a7302afd88586c850f54576a929932b1a3718f3c6d957a8994cff75d1506ab99de724dfdb30f55d607eb324ea4ae08e2b071ffc4bf590fc97d68dc91a09ac588875a97933d5e30a3a12348505b324370cbf718be4189fa3153bf9f48ef87495bd8bec7b294168571c95d9cd75c226eedf67ee224ea857994979f3b99dd562ebe122a5c1d223c90ef8e760a67e9bf4919785"]) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$xdp(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x2c, 0x4, r4, 0x35}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="24ba0f994eaad30d8066b6dfbac91d1debb5fd3de296e6f2360395ce9f6b9f37ea94390f7d19a3d7e951884e7b60dceede505bcbc43eb36bd558e6c9f0fdbd9dd9e21f4b88464e137107bcf051ba56380cef6c1cc9c6289020a297c0d1e7a28abecf015c88039bc07a4375a8e5413ed84245683890e786b819f49156cc42d686920367b58f43cd85fe61869d840833af6c68aab88a5bbddceecdab88adaefaf42cc136d6cad4fe4608480537ea7be1e1854cfef540aaa68cd48e904a4c9d577907a10ca0b91ed3ae9facd38356", 0xcd}, {&(0x7f0000000500)="ee18ac75ff348d00c8501260e32731ea187d2da662f11cf7f36d9119c8bf4d355916b6d0380de5f32b7370cd720f276d4d5c6dd748ec21e2bff6c13a632ddf86536e253e51b6feab4bff", 0x4a}, {&(0x7f0000000580)="25a5b803f9e6ed6cc68bea2f208d0f941002715668c6a5120bde7bf00c9787412b2c6e78752f8ef44e5ce40458e902", 0x2f}, {&(0x7f00000005c0)="4d4f9d3f392a9ca135825ca1a1dd279d7e6e8c3bccafebfbdc42b549246614ccd4d0e1c0e12cf9068cdefb3ac940f3374a62b6eb5695e7357f74a912b21ae7ade530a9bd2f5b1521245e46c73870a04ab82c2f35afa9c04a16062752f839a5368e5e212b214f8a654bb65e3abb0d1d4eb62e9efde294519264f61edd365d4f5006d35da542382e25d58621ed83b169323b6b836f99d01b85c712033fcc2f4c3b96e5bf0ff9767c1aa5da3003a76cc6d14d4a83b30ff7498d5d51d859247baac26ceb47a687abed55e5c302bfd44b00dee46d6564950d89b6288285f465a8db9262a7020a255e8c6eb8f469067e17fa", 0xef}, {&(0x7f00000006c0)="ed4e", 0x2}], 0x5, 0x0, 0x0, 0x4080}, 0xff852c119526b1a9) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 644.662228][T24462] overlayfs: missing 'workdir' [ 644.681712][ T27] audit: type=1804 audit(1581974264.147:1004): pid=24462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/658/bus/file0" dev="sda1" ino=16661 res=1 [ 644.725159][T24448] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 644.798322][T24448] FAT-fs (loop5): Filesystem has been set read-only [ 644.799678][T24471] overlayfs: missing 'workdir' 21:17:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400600, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 644.851449][T24448] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x4) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = geteuid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c141b46ff57aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) chown(&(0x7f0000000040)='./file0\x00', r2, r3) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:44 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x2000, 0x8080fffffffe) 21:17:44 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x504, 0x8080fffffffe) 21:17:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4c01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400700, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 645.354063][T24496] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 645.362933][T24496] FAT-fs (loop5): Filesystem has been set read-only [ 645.369795][T24496] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:44 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x505, 0x8080fffffffe) 21:17:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 645.445763][T24488] overlayfs: './file0' not a directory 21:17:45 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x3f00, 0x8080fffffffe) 21:17:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d86fe6d3101119e22726b646972f8ad3c6b711934ca697bf490fb9f6f383d2e2f66696c65312cdff8bb96f9619866b6506487eec4daac58829de99164bc666536594d0052ed8a5ec8889e86efd6f18ac4a9afb21c1c4c943227d9e8669e6f22b6a468b97f60bff80450db51535f59f1a8bcb079ab30d67c0947a6e3677a6fe98d03e1d2b728ec7a4f4b7f97ee45088f16c63636d18442538bad77e4a3439e5145cb04bac0b2"]) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x3, 0x6, 0x4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x246f00, 0x8) 21:17:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400804, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 645.924746][T24534] overlayfs: unrecognized mount option "ßø»–ùa˜f¶Pd‡îÄÚ¬X‚é‘d¼fe6YM" or missing value [ 646.026762][T24548] overlayfs: unrecognized mount option "ßø»–ùa˜f¶Pd‡îÄÚ¬X‚é‘d¼fe6YM" or missing value 21:17:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4c80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400900, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:45 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x4000, 0x8080fffffffe) 21:17:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=.workdir=./file1,upperdir=./file0\x00\x00\x00\x00\x00']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:45 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x506, 0x8080fffffffe) [ 646.390437][T24560] overlayfs: missing 'workdir' [ 646.405547][ T27] audit: type=1804 audit(1581974265.877:1005): pid=24560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/661/bus/file0" dev="sda1" ino=16525 res=1 21:17:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 646.449226][T24560] overlayfs: missing 'workdir' [ 646.461968][ T27] audit: type=1804 audit(1581974265.927:1006): pid=24563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/661/bus/bus/file0" dev="sda1" ino=16569 res=1 21:17:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r3) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000001c0)='./bus/file1\x00', &(0x7f0000000200)='9p\x00', 0x10802, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0xa4e}}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@appraise_type='appraise_type=imasig'}]}}) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7a6f7f657264ce29eeaf376555fb2c777069723d2e2f66696c653014000000000000000000000000cb8c77d83a213e3c9f92424e874f000000"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 646.709940][T24573] overlayfs: unrecognized mount option "zoerdÎ)î¯7eUû" or missing value 21:17:46 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xc800, 0x8080fffffffe) [ 646.801468][ T27] audit: type=1804 audit(1581974266.267:1007): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/662/bus/file0" dev="sda1" ino=16786 res=1 [ 646.830180][T24575] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 646.873746][ T27] audit: type=1804 audit(1581974266.347:1008): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/662/bus/file0" dev="sda1" ino=16786 res=1 [ 646.876125][T24592] overlayfs: unrecognized mount option "zoerdÎ)î¯7eUû" or missing value [ 646.908546][T24575] FAT-fs (loop5): Filesystem has been set read-only 21:17:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400a00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 646.983297][T24575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4c81, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r2 = syz_open_dev$media(&(0x7f00000017c0)='/dev/media#\x00', 0xffffffffffffff75, 0x40000) write$UHID_CREATE(r2, &(0x7f0000001900)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000001800)=""/215, 0xd7, 0x7, 0x81, 0x2a, 0x5, 0x2}}, 0x120) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='./file1\x00', 0x670e698c, 0x5, &(0x7f0000001680)=[{&(0x7f0000000400)="6434fc5d6590596129f1f7779335074b4c2f38eed61c6355596fd0eeea454c8e6612edbed3e1228599deaa9b826ce7aacf25f285326b2fbbdc24b159c3953c3b0768b2834d2453d3c83ef2241202d05ebac77cbab4e3b77afdd205a741b9e1000dca250dbcbdb0e0e865df3bbe8557a6d2464f5e5c52d77eb26a0e0223f3a7133af3291edf086615fab438cf360118ea0031d7d2d8ab9d64f0a2bae5b82b421697502a7629b3e81d47028d87bc5b2e1facf397f0fc79ae0aa314659f0de8", 0xbe, 0x8}, {&(0x7f00000004c0)="48dcbda2edc97e3755ed6a929cdce49558444c435f9628f829d59c2c880251124a3e", 0x22, 0x1}, {&(0x7f0000000500)="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", 0x1000, 0xfffffffffffffffc}, {&(0x7f0000001500)="fe99bbfa03417b32ca690275e388e72844cc25edcba5d0d2c465e2e94d3a8f63b47d18bd067a5ccd9b39210c7e7bec3b0d0f834ed257647baf70423c61b54e7fd62b5057bdb358e48abccffcb4c030e2575da3267c393b453ecbd9574c9c8bce7afa731bce3b0b86721bb0066f51d7f607895f6dc59852", 0x77, 0x1}, {&(0x7f0000001580)="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", 0xfc, 0x23}], 0x20000, &(0x7f0000001700)=ANY=[@ANYBLOB="73697a653d2c687567653d6e657665723d64656661756c745f7065726d690500696f6e732c736d61636b6673726f6f743d6b657972696e672c6d6561737572652c7375626a5f726f6c653d6367726f757073656c696e75782c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x00000000000000fd,\x00']) chdir(&(0x7f00000002c0)='./bus\x00') mount$overlay(0x0, &(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000300)={[{@redirect_dir={'redirect_dir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fsname={'fsname', 0x3d, 'overlay\x00'}}]}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x334, 0x1f, 0x9, 0xfc}, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:46 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x507, 0x8080fffffffe) 21:17:46 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xe0ff, 0x8080fffffffe) 21:17:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400b00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 647.592276][T24619] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 647.601110][T24619] FAT-fs (loop5): Filesystem has been set read-only [ 647.609659][T24619] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r3) chown(&(0x7f0000000040)='./file0\x00', r3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:47 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x508, 0x8080fffffffe) 21:17:47 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xf0ff, 0x8080fffffffe) 21:17:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400c00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 648.261895][T24647] overlayfs: './file0' not a directory [ 648.300200][ T27] audit: type=1804 audit(1581974267.767:1009): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/664/bus/bus/file0" dev="overlay" ino=16594 res=1 21:17:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x5206, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:47 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xffffffff000, 0x8080fffffffe) 21:17:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400d00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f772c776f726b02000000000000006c65310100707065726469723d2e2f66696c6530"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 648.646373][T24692] overlayfs: unrecognized mount option "low" or missing value [ 648.661974][ T27] audit: type=1804 audit(1581974268.127:1010): pid=24692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/665/bus/file0" dev="sda1" ino=16532 res=1 [ 648.702272][T24692] overlayfs: unrecognized mount option "low" or missing value 21:17:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 648.767244][ T27] audit: type=1804 audit(1581974268.177:1011): pid=24697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/665/bus/bus/file0" dev="sda1" ino=16597 res=1 21:17:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) r2 = socket(0x5, 0x0, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xa5c}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c004) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:48 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000002) 21:17:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x401020, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:48 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x509, 0x8080fffffffe) [ 649.199632][T24713] overlayfs: './file0' not a directory [ 649.222109][ T27] audit: type=1804 audit(1581974268.687:1012): pid=24732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/666/bus/bus/file0" dev="overlay" ino=16642 res=1 21:17:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x540f, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x401200, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 649.295751][T24723] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 649.323402][T24723] FAT-fs (loop5): Filesystem has been set read-only 21:17:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x14) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 649.366111][T24723] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:49 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x50c, 0x8080fffffffe) 21:17:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x541b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) [ 649.767854][T24755] overlayfs: './file0' not a directory 21:17:49 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) recvmmsg(r1, &(0x7f0000002100)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000001540)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/151, 0x97}, {&(0x7f00000013c0)=""/175, 0xaf}, {&(0x7f0000001480)=""/144, 0x90}], 0x5, &(0x7f00000015c0)=""/4, 0x4}, 0x4}, {{&(0x7f0000001600)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001680)=""/84, 0x54}, {&(0x7f0000001700)=""/81, 0x51}, {&(0x7f0000001780)=""/52, 0x34}, {&(0x7f00000017c0)=""/246, 0xf6}, {&(0x7f00000018c0)=""/126, 0x7e}, {&(0x7f0000001940)=""/7, 0x7}, {&(0x7f0000001980)=""/191, 0xbf}, {&(0x7f0000001a40)=""/224, 0xe0}], 0x8, &(0x7f0000001bc0)=""/223, 0xdf}, 0xfffffffb}, {{&(0x7f0000001cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d40)=""/128, 0x80}, {&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/55, 0x37}, {&(0x7f0000001ec0)=""/101, 0x65}, {&(0x7f0000001f40)=""/187, 0xbb}, {&(0x7f0000002000)=""/14, 0xe}], 0x6, &(0x7f00000020c0)=""/26, 0x1a}, 0x1}], 0x3, 0x2223, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 649.973338][T24759] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:49 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000003) 21:17:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x401400, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 650.072860][T24759] FAT-fs (loop5): Filesystem has been set read-only [ 650.103021][T24759] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:49 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x50d, 0x8080fffffffe) [ 650.209713][ T27] audit: type=1804 audit(1581974269.677:1013): pid=24780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/668/bus/file0" dev="sda1" ino=16615 res=1 21:17:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x401626, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 650.269235][T24773] overlayfs: failed to resolve './file0': -2 21:17:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x5421, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 650.640713][T24790] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 650.717729][T24790] FAT-fs (loop5): Filesystem has been set read-only [ 650.752979][T24790] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) [ 650.773704][T24807] overlayfs: './file0' not a directory [ 650.788423][ T27] audit: type=1804 audit(1581974270.257:1014): pid=24812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/669/bus/bus/file0" dev="overlay" ino=16570 res=1 21:17:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x401926, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65309cf37c955988e419ffd57ec4ce5478789ea091d30b375d26ac34d6d3dbad4acf1d9c4aea34f42e9be4be86ea2dcf57368ff609a206e76ad335adaa83b8afbf90063de16c6c62d3f6c200e74207d222cc9c7116e1d669010c36a320561ea6c1187aa79228d2accef2c99623cb0fb0225cc1a3fee44ebab4bb9410afdeb80d7c16283610c84d6eee58742f1499bfc17b4ba73771c54fefc614cc1020f6f1647fe4cecdb8ee86ba9f28d92a003b0552214ef3ceaba2bfeb9d3caa24e297b042fad3bf2638"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 651.110824][T24827] overlayfs: failed to resolve './file0œó|•YˆäÿÕ~ÄÎTxxž ‘Ó 7]&¬4ÖÓÛ­JÏœJê4ô.›ä¾†ê-ÏW6ö ¢çjÓ5­ªƒ¸¯¿=állbÓöÂ': -2 [ 651.166130][ T27] audit: type=1804 audit(1581974270.637:1015): pid=24827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/670/bus/file0" dev="sda1" ino=16580 res=1 21:17:50 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000004) 21:17:50 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x510, 0x8080fffffffe) 21:17:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x5450, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x402000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 651.228604][T24827] overlayfs: failed to resolve './file0œó|•YˆäÿÕ~ÄÎTxxž ‘Ó 7]&¬4ÖÓÛ­JÏœJê4ô.›ä¾†ê-ÏW6ö ¢çjÓ5­ªƒ¸¯¿=állbÓöÂ': -2 21:17:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:50 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0xfffffffffffffffe) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x20) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f77657269726469723d3b2f66690000000000000000000000000000000000006676a2075e96fd527ab008d980bc406fa9a5285cdb5443e347b3a8ac1dd77691d9b3a1cee13514ce27639b8fde"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 651.277937][ T27] audit: type=1804 audit(1581974270.697:1016): pid=24833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/670/bus/bus/file0" dev="sda1" ino=16551 res=1 21:17:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x402010, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 651.696526][T24862] overlayfs: unrecognized mount option "lowerirdir=;/fi" or missing value [ 651.758148][ T27] audit: type=1804 audit(1581974271.227:1017): pid=24862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/671/bus/file0" dev="sda1" ino=16567 res=1 21:17:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e296275731f776f726b6469723d2e2f66696c65312c759ef27873075790012e707065726469723d2e"]) chdir(&(0x7f00000002c0)='./bus\x00') ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 651.834268][T24864] overlayfs: unrecognized mount option "lowerirdir=;/fi" or missing value 21:17:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x402616, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 652.036297][T24876] overlayfs: unrecognized mount option "užòxsW.pperdir=." or missing value [ 652.102693][ T27] audit: type=1804 audit(1581974271.567:1018): pid=24876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/672/bus/file0" dev="sda1" ino=16555 res=1 [ 652.115168][T24881] overlayfs: unrecognized mount option "užòxsW.pperdir=." or missing value 21:17:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x5451, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:51 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x512, 0x8080fffffffe) 21:17:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66896c65312c75707065726469723d2e2f66696c6530"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x402619, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:51 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000005) [ 652.515607][T24900] overlayfs: failed to resolve './f‰le1': -2 21:17:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x403000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 652.599476][ T27] audit: type=1804 audit(1581974272.067:1019): pid=24912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/673/bus/file0" dev="sda1" ino=16552 res=1 21:17:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 652.675936][T24912] overlayfs: './file0' not a directory [ 652.682674][T24899] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 652.744846][T24899] FAT-fs (loop5): Filesystem has been set read-only 21:17:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x403f00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 652.829439][T24899] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) symlink(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='./bus\x00') creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:52 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x514, 0x8080fffffffe) 21:17:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x5452, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x404000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 653.320623][T24945] overlayfs: './file0' not a directory 21:17:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) pwritev(r6, &(0x7f0000000480)=[{&(0x7f0000000300)="5fea05b8ece8484ae67bec3b5f126a480726ff8c686179edfbf27e2f311b147391ae35f1f922d851ab538ed8d4bfaf464ac70e660a0094431ca26d13010b2d64af49d5345fbb572147db8f3b9ba15b8a45ba039cf830f7c09b413f14bf", 0x5d}, {&(0x7f0000000380)="09b7970dd8a40a4a5890922cb9678b61b7127f5ce03a19fcb876e6d9e5d996eb8cd6610ee0b209475f16a75ac307b61ef3ae5c5458a5b49fc597ebd72b82bb1acb56c4fa78dc4efcd1b0d92c0c42e3442cba65b1d3ef8bd91e41c48a5673b33450c3878a4334225e5eb42635548425d0122f716e5163e983697077efeabad831b1c040b22eeae9febe707f370093e1e2f7d2f435d6c798f7fd8318e93d50877499a8d5c5469a6e321b56192c88f6daf42c6827bd5051fa28fe532c8d2d5595cf515bf1e7c743", 0xc6}], 0x2, 0x2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r10, 0x5f, 0x2f16, 0x1, 0x7, 0x6, 0x4, 0x800, 0x5, 0x4, 0x1000, 0x3f}) dup(r7) r11 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10c) 21:17:53 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000006) 21:17:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x405c00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x5460, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:53 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x517, 0x8080fffffffe) [ 654.079657][T24968] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 654.101378][T24968] FAT-fs (loop1): Filesystem has been set read-only [ 654.112183][T24968] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40f000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 654.226997][T24986] overlayfs: './file0' not a directory 21:17:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=.:bus,workdir=./file9,upperdir=./file0']) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fremovexattr(r3, &(0x7f00000001c0)=@known='com.apple.system.Security\x00') chdir(&(0x7f00000002c0)='./bus\x00') r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e4702b30"}, 0x0, 0x0, @userptr}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:53 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x518, 0x8080fffffffe) 21:17:53 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000007) [ 654.396294][T24998] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 654.418791][T24998] FAT-fs (loop5): Filesystem has been set read-only [ 654.426077][T24998] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40ff00, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x6364, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 654.703278][T25009] overlayfs: failed to resolve './file9': -2 21:17:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 654.901707][T25014] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x20000000400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x14840, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40ff01, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 655.058876][T25014] FAT-fs (loop5): Filesystem has been set read-only [ 655.090847][T25014] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 655.153796][T25041] overlayfs: missing 'lowerdir' 21:17:54 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x51c, 0x8080fffffffe) [ 655.195920][ T27] audit: type=1804 audit(1581974274.647:1020): pid=25041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/677/bus/file0" dev="sda1" ino=16578 res=1 [ 655.257717][T25047] overlayfs: missing 'lowerdir' 21:17:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 655.319173][ T27] audit: type=1804 audit(1581974274.787:1021): pid=25054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/677/bus/bus/file0" dev="sda1" ino=16642 res=1 21:17:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdyr=./file1,upperdir=.\x00file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000300)) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 655.556605][T25068] overlayfs: unrecognized mount option "workdyr=./file1" or missing value [ 655.562411][T25060] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 655.575313][ T27] audit: type=1804 audit(1581974275.037:1022): pid=25068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/678/bus/file0" dev="sda1" ino=16705 res=1 [ 655.579420][T25068] overlayfs: unrecognized mount option "workdyr=./file1" or missing value [ 655.669531][T25060] FAT-fs (loop5): Filesystem has been set read-only [ 655.704325][T25060] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) [ 655.721482][ T27] audit: type=1804 audit(1581974275.087:1023): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/678/bus/bus/file0" dev="sda1" ino=16769 res=1 21:17:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000200)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0x140, 0x228, 0x0, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x51764e7e, 0x8]}}, @common=@set={{0x40, 'set\x00'}, {{0x3, [0x0, 0x2, 0x2, 0x4, 0x4, 0x1], 0x5, 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x1, 0x4, 0x3, 0x7, 0x5], 0x5, 0x1}, {0x3, [0x1, 0x2, 0x2, 0x0, 0x4, 0x2], 0x3, 0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xe, 'K\f'}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@empty, @rand_addr=0x2, 0xffffff00, 0x0, 'team0\x00', 'lo\x00', {0xff}, {}, 0x84, 0x1, 0x54}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x81a, 0x204, 0x1, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x2}, {0x1}, 0x40, 0xff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./f_le1,upUerdir=.file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f00000007c0)=""/185) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$l2tp(r4, &(0x7f00000001c0)={0x2, 0x0, @broadcast, 0x3}, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) 21:17:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x8912, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40ff03, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:55 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080ffffffc0) 21:17:55 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x522, 0x8080fffffffe) [ 655.867050][T25079] x_tables: duplicate underflow at hook 2 21:17:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 655.918847][T25079] overlayfs: unrecognized mount option "upUerdir=.file0" or missing value [ 655.947761][ T27] audit: type=1804 audit(1581974275.417:1024): pid=25079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/679/bus/file0" dev="sda1" ino=16542 res=1 21:17:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40ff0f, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 656.049013][T25089] x_tables: duplicate underflow at hook 2 [ 656.077535][T25089] overlayfs: unrecognized mount option "upUerdir=.file0" or missing value [ 656.174129][T25092] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 656.240620][T25092] FAT-fs (loop1): Filesystem has been set read-only [ 656.262741][ T27] audit: type=1804 audit(1581974275.727:1025): pid=25089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/679/bus/bus/file0" dev="sda1" ino=16546 res=1 [ 656.268342][T25092] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 656.327338][T25101] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x8914, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = msgget(0x0, 0x8) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000300)=""/155) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 656.387862][T25101] FAT-fs (loop5): Filesystem has been set read-only [ 656.427757][T25101] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x600000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:56 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x584, 0x8080fffffffe) 21:17:56 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080ffffffe0) 21:17:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:17:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x800000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 656.752015][ T27] audit: type=1804 audit(1581974276.217:1026): pid=25132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/680/bus/bus/file0" dev="overlay" ino=16534 res=1 21:17:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000640)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x92) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000380)) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000cd69723d2e2f66696c65312c7570d39e21067065726469723d2e2f66696c6530"]) io_uring_setup(0xe6b, &(0x7f0000000680)={0x0, 0x0, 0xc, 0x0, 0x286}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r11) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000000)=[0x8, 0x10000, 0x101, 0x7, 0x62, 0x1, 0x3, 0x1c5], 0x8, 0x80000, r10, r11}) r12 = syz_open_dev$vivid(&(0x7f00000003c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r12, 0x4038564f, &(0x7f0000000400)={{0x4, @addr=0x2}, 0x8, 0x10000, 0x7}) 21:17:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 656.934958][T25142] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 656.949693][T25142] FAT-fs (loop1): Filesystem has been set read-only [ 656.963112][T25142] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 656.976310][T25141] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 657.024947][T25141] FAT-fs (loop5): Filesystem has been set read-only [ 657.048008][T25141] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:17:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:56 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffd) 21:17:56 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5a9, 0x8080fffffffe) 21:17:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x8933, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x80ffff, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 657.272403][T25158] overlayfs: missing 'lowerdir' 21:17:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x6e, "33355017fab614e5f19d47a44fe60e73b9317c00eb7eed0d5aee4728f053cefb358384af375d3513fdf5f29c64ec2eb77c688b9bc787ec708ee532d8703368e932f3cf9ad032249c226235cf302cdd92e0d3cedfec9c945e3e611249f1d9a4d18583dd5e91bc6ed30a371a9fb1cd"}, &(0x7f0000000000)=0x76) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000380)=0x10) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 657.579470][T25179] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:17:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0xa0ffff, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 657.624226][T25179] FAT-fs (loop1): Filesystem has been set read-only [ 657.631184][T25179] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 657.776575][ T27] audit: type=1804 audit(1581974277.247:1027): pid=25191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/682/bus/file0" dev="sda1" ino=16586 res=1 [ 657.855543][T25191] overlayfs: './file0' not a directory 21:17:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x8935, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7701010000723d2e0f6275732c776f72707065726469723d2e2f66496c653020000000006dc45f134b20a28200"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000200)=""/104) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r2, r2, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0xc0ffff, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 658.272497][T25209] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 658.286957][T25214] overlayfs: unrecognized mount option "low" or missing value [ 658.294785][T25209] FAT-fs (loop1): Filesystem has been set read-only [ 658.301649][T25209] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:57 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5ab, 0x8080fffffffe) [ 658.313149][ T27] audit: type=1804 audit(1581974277.787:1028): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/683/bus/file0" dev="sda1" ino=16527 res=1 [ 658.322111][T25214] overlayfs: unrecognized mount option "low" or missing value 21:17:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000007c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8002, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000300)={0xb067, 0x6, 0x4, 0x2000, 0xffffffff, {0x77359400}, {0x5, 0xc, 0x80, 0x10, 0x9, 0x7, "229fb360"}, 0x0, 0x1, @userptr=0x1, 0x9, 0x0, r6}) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000000780)={0x3, 0x1, 0xf, 0xa, 0x1d3, &(0x7f0000000380)}) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)={r10}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r10, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={r10, 0x1}, &(0x7f0000000200)=0x8) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:57 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x204000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x1}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r2, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:17:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 658.448259][ T27] audit: type=1804 audit(1581974277.817:1029): pid=25223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/683/bus/bus/file0" dev="sda1" ino=16582 res=1 21:17:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x7ffffffff000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 658.801363][T25247] overlayfs: './file0' not a directory 21:17:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f77657264697272d716b67ac83d2e2f6299732c776f726b6469723d2e2f66696c65312c75307065726469723d2e2f66696c65304e6819431bdfa181e3aebcf40fd443309355a14043254b133c3c1329334ee9b1dd414617db89c92255e750ab3211e45d9b63f532cc1a9be5f2168f75f16a08eea5b598dc70ff265e3659634c76dc890274"]) chdir(&(0x7f00000002c0)='./bus\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x70, 0x3, 0x44, 0x2, 0x80, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x8, 0x0, 0x9, 0x9, 0x8, 0x200, 0x9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xb) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x6) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000300)="4887dc21d1fb719aa40574c5c5ce49429c527d3c0b0c21de6077edafff4f521e5d6c53ee5d11fea049ad7aab6713aefbaad4f95e3acec95404cc3e71be6205d082e72fc0833be09398c9bbe9a9f145d918ad8ba3aa94df3326d66554002a4e20e8685f4f2fc965e9d029d27845a91b25a4b27b8e352248d9298d9bad24816b61d3037937499fe3e5b0510ccc7d1faed2129063a180004147e08620256aad8ce92d590eaed3ab5b", 0xa7) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x8982, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:17:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 659.277019][T25277] overlayfs: unrecognized mount option "lowerdirr׶zÈ=./b™s" or missing value 21:17:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:17:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:59 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5ae, 0x8080fffffffe) 21:17:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x89e5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:17:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e866275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:17:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:17:59 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x8000, 0xa, 0x4, 0x20100, 0x2, {0x0, 0x2710}, {0x3, 0x0, 0xd1, 0x81, 0xc4, 0x7, "ad1cf32b"}, 0x7f, 0x2, @userptr=0x160e, 0x1000, 0x0, r0}) ioctl$TIOCSBRK(r1, 0x5427) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0413d863c8be8d67fa435e12e7eff705f975e25dfb2ec4cf31e383f1d31e4bbf9a87fa3bb332dcfbde0ad89dbebad83c6c96127b4b67f1a2c8bb19af696e334d4d815d6f5fae094aedd60d8561a4af9048a05440dd4007a2557335d8d497303d003899916c0ec1b10649cd4a5f14d8eaf27be4f93a"], 0x13, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r3, r3, &(0x7f00000000c0)=0x500, 0x8080fffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCEXCL(r7, 0x540c) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x180, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @remote, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa8a}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x80000001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20040005}, 0x841) [ 659.802139][T25300] overlayfs: failed to resolve '.†bus': -2 21:17:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:17:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 659.946375][T25308] overlayfs: './file0' not a directory [ 659.957779][T25309] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 659.981065][T25309] FAT-fs (loop5): Filesystem has been set read-only [ 659.993063][T25309] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) [ 659.994081][T25313] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 660.011027][T25313] FAT-fs (loop1): Filesystem has been set read-only [ 660.018251][T25313] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 21:17:59 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5af, 0x8080fffffffe) 21:17:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:17:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 21:17:59 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x50) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x211, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'bridge_slave_1\x00', {0x4}, 0x851}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000004c0)={0x87, @remote, 0x4e24, 0x1, 'lblc\x00', 0x11, 0x80000001, 0x2d}, 0x2c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000aed8b9536404000000dcc13d65c7f40500a3b7719b8f32b29b0a29baffaedcd8eb74c264edbfc08356ed07f79b72767f12d1f160f7fb32ebc84f02d3", @ANYRES16=r7, @ANYBLOB="00032dbd7000fddbdf2514000000100002800800020003000000040004000c00028008000200010000000400068014000980080002004000000008000100000800003c0003800800010007000000080002000200000008000100020000000800030003000000080003000080000008000200060000000800010003000000340009800800010001010000080002000000000008000200001000000800020000000000080001000000000008000100ffffffff34000380080001008e000000080002003f00000008000100030000000800010071e900000800030083ffffff0800020000000000"], 0xec}}, 0x20000810) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x198, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1018}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb23}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2740}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca45}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast1, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7d}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x52240, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) sendfile(r1, r9, &(0x7f00000000c0)=0x3, 0x8080fffffffb) 21:17:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 660.351737][T25328] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 660.374520][T25328] FAT-fs (loop5): Filesystem has been set read-only [ 660.427362][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 660.427378][ T27] audit: type=1804 audit(1581974279.897:1033): pid=25341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/687/bus/bus/file0" dev="overlay" ino=16611 res=1 [ 660.461262][T25328] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0xfff, 0x100, 0x3, 0x7fffffff}, 0x10) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:18:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:00 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5b2, 0x8080fffffffe) [ 660.819909][T25354] overlayfs: './file0' not a directory [ 660.847377][ T27] audit: type=1804 audit(1581974280.317:1034): pid=25366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/688/bus/bus/file0" dev="overlay" ino=16673 res=1 21:18:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:18:00 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/174) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:18:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)={0x0, 0xb, 0x4, 0xe000, 0x5, {0x0, 0x2710}, {0x2, 0x0, 0xce, 0x9, 0xdb, 0xde, "058ca5a6"}, 0xdb, 0x1, @fd=r1, 0x0, 0x0, r3}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000100)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f75732c7721628877a955bd8ed520d26f72e16469723d2e2f6669c1392d76ed522b277565312c75707065726469723d2e2f9c696c6530"]) r7 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0xa) ioctl$SIOCX25GCALLUSERDATA(r7, 0x89e4, &(0x7f0000000380)={0x19, "58aaabf6ab4d1f14eec7bcb0a148faf783ecbc1984d5ce9b0df46f0b4173ac6c136cf328ebda68235801f93e87a63c32a94e9ba46f4ece2c48d0acca45b59e2eadd033cf2eded3804a0804c81f43cd161adb803a4ae8d807f2cae1c85d4f30be4972f9d27dd25e5c9668564395d2ab589797cd5bf9f0ca92a8d85c9f127990e8"}) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x2) [ 661.062410][T25371] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:18:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 661.138498][T25371] FAT-fs (loop5): Filesystem has been set read-only [ 661.211832][T25371] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 16) 21:18:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:00 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5b5, 0x8080fffffffe) [ 661.423604][T25391] overlayfs: unrecognized mount option "lous" or missing value 21:18:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:18:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae02, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) [ 661.531974][T25397] overlayfs: unrecognized mount option "lous" or missing value 21:18:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='low\x00\x00\x00\x00\x00\x00\x00\x00bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000740)={0x1, 0x0, {0x6, 0x6, 0x1, 0x2}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000e00300000802000000000000080200003801000008020000100300001003000010030000100300001003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80038010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d4000004d507000000030100006000484d41524b00000000000000000000000000000000000000000000000000e0000001000000000000000000000000ffffffffffffff0000000000000000ff4e244e214e234e20010001000800000000000000030000000001000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001effffff0000000000000000000000000000000000ff000000ff000000ffffffff7663616e3000000000000000000000006970366772657461703000000000000000000000000000000000000000000000ff0000000000000000000000000000003a0007072000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000801000000000000000000000000000000000000000000000000380074696d6500000000000000000000000000000000000000000000000000000300000005000000531c0000ac7d0000b407ffff01020000280053594e50524f5859000000000000000000000000000000000000000000000240090c000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x440) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 661.746008][T25404] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 661.773024][T25404] FAT-fs (loop5): Filesystem has been set read-only 21:18:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 661.804247][T25404] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 16) 21:18:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 661.973766][T25423] overlayfs: unrecognized mount option "low" or missing value 21:18:01 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x4600, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:18:01 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5b8, 0x8080fffffffe) 21:18:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @rand_addr=0x8}, 0xdf0953f8, 0x1, 0x2, 0x2, 0x6, 0xfff7}, &(0x7f00000001c0)=0x20) 21:18:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x400454ca, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:18:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 662.352874][T25446] overlayfs: './file0' not a directory [ 662.361007][ T27] audit: type=1804 audit(1581974281.827:1035): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/691/bus/bus/file0" dev="overlay" ino=16658 res=1 [ 662.393047][T25438] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 662.401891][T25438] FAT-fs (loop5): Filesystem has been set read-only [ 662.423196][T25438] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 16) 21:18:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file2\x00', &(0x7f0000000500)=[&(0x7f00000001c0)='overlay\x00', &(0x7f0000000200)='overlay\x00', &(0x7f0000000300)='overlay\x00', &(0x7f0000000340)='overlay\x00', &(0x7f0000000380)='overlay\x00', &(0x7f00000003c0)='overlay\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000440)='overlay\x00', &(0x7f0000000480)='@-wlan1-)\x00', &(0x7f00000004c0)='overlay\x00'], &(0x7f00000007c0)) 21:18:02 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5bb, 0x8080fffffffe) 21:18:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 662.893184][T25477] [ 662.895563][T25477] ====================================================== [ 662.902685][T25477] WARNING: possible circular locking dependency detected [ 662.909843][T25477] 5.6.0-rc2-syzkaller #0 Not tainted [ 662.915123][T25477] ------------------------------------------------------ [ 662.922158][T25477] syz-executor.3/25477 is trying to acquire lock: [ 662.928565][T25477] ffff88803a04db40 (&ovl_i_mutex_dir_key[depth]){++++}, at: path_openat+0x1c1f/0x3490 [ 662.938108][T25477] [ 662.938108][T25477] but task is already holding lock: [ 662.945459][T25477] ffff8880a4708750 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x2270 [ 662.955529][T25477] [ 662.955529][T25477] which lock already depends on the new lock. [ 662.955529][T25477] [ 662.965912][T25477] [ 662.965912][T25477] the existing dependency chain (in reverse order) is: [ 662.974916][T25477] [ 662.974916][T25477] -> #3 (&sig->cred_guard_mutex){+.+.}: [ 662.982635][T25477] __mutex_lock+0x156/0x13c0 [ 662.987729][T25477] mutex_lock_killable_nested+0x16/0x20 [ 662.993837][T25477] do_io_accounting+0x1f4/0x820 [ 662.999202][T25477] proc_tgid_io_accounting+0x23/0x30 [ 663.004985][T25477] proc_single_show+0xfd/0x1c0 [ 663.010250][T25477] seq_read+0x4ca/0x1170 [ 663.014994][T25477] do_iter_read+0x4a4/0x660 [ 663.020015][T25477] vfs_readv+0xf0/0x160 [ 663.024685][T25477] default_file_splice_read+0x4fb/0xa20 [ 663.030738][T25477] do_splice_to+0x127/0x180 [ 663.035763][T25477] splice_direct_to_actor+0x320/0xa30 [ 663.041657][T25477] do_splice_direct+0x1da/0x2a0 [ 663.047013][T25477] do_sendfile+0x597/0xd00 [ 663.051948][T25477] __x64_sys_sendfile64+0x1dd/0x220 [ 663.057657][T25477] do_syscall_64+0xfa/0x790 [ 663.062669][T25477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.069063][T25477] [ 663.069063][T25477] -> #2 (&p->lock){+.+.}: [ 663.075553][T25477] __mutex_lock+0x156/0x13c0 [ 663.080650][T25477] mutex_lock_nested+0x16/0x20 [ 663.085915][T25477] seq_read+0x71/0x1170 [ 663.090573][T25477] do_iter_read+0x4a4/0x660 [ 663.095584][T25477] vfs_readv+0xf0/0x160 [ 663.100262][T25477] default_file_splice_read+0x4fb/0xa20 [ 663.106421][T25477] do_splice_to+0x127/0x180 [ 663.111429][T25477] splice_direct_to_actor+0x320/0xa30 [ 663.117330][T25477] do_splice_direct+0x1da/0x2a0 [ 663.122702][T25477] do_sendfile+0x597/0xd00 [ 663.127625][T25477] __x64_sys_sendfile64+0x1dd/0x220 [ 663.133337][T25477] do_syscall_64+0xfa/0x790 [ 663.138352][T25477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.144741][T25477] [ 663.144741][T25477] -> #1 (sb_writers#3){.+.+}: [ 663.151585][T25477] __sb_start_write+0x241/0x460 [ 663.156939][T25477] mnt_want_write+0x3f/0xc0 [ 663.161951][T25477] ovl_want_write+0x76/0xa0 [ 663.166971][T25477] ovl_create_object+0xb3/0x2c0 [ 663.172330][T25477] ovl_create+0x28/0x30 [ 663.176998][T25477] lookup_open+0x12d5/0x1a90 [ 663.182113][T25477] path_openat+0xf2c/0x3490 [ 663.187146][T25477] do_filp_open+0x192/0x260 [ 663.192156][T25477] do_sys_openat2+0x5eb/0x7e0 [ 663.197337][T25477] do_sys_open+0xf2/0x180 [ 663.202184][T25477] __x64_sys_creat+0x61/0x80 [ 663.207362][T25477] do_syscall_64+0xfa/0x790 [ 663.212367][T25477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.218754][T25477] [ 663.218754][T25477] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}: [ 663.226899][T25477] __lock_acquire+0x2596/0x4a00 [ 663.232272][T25477] lock_acquire+0x190/0x410 [ 663.237276][T25477] down_read+0x95/0x430 [ 663.241947][T25477] path_openat+0x1c1f/0x3490 [ 663.247058][T25477] do_filp_open+0x192/0x260 [ 663.252079][T25477] do_open_execat+0x137/0x690 [ 663.257273][T25477] __do_execve_file.isra.0+0x16d5/0x2270 [ 663.263420][T25477] __x64_sys_execve+0x8f/0xc0 [ 663.268620][T25477] do_syscall_64+0xfa/0x790 [ 663.273676][T25477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.280071][T25477] [ 663.280071][T25477] other info that might help us debug this: [ 663.280071][T25477] [ 663.290286][T25477] Chain exists of: [ 663.290286][T25477] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &sig->cred_guard_mutex [ 663.290286][T25477] [ 663.304332][T25477] Possible unsafe locking scenario: [ 663.304332][T25477] [ 663.311801][T25477] CPU0 CPU1 [ 663.317145][T25477] ---- ---- [ 663.322497][T25477] lock(&sig->cred_guard_mutex); [ 663.327512][T25477] lock(&p->lock); [ 663.333814][T25477] lock(&sig->cred_guard_mutex); [ 663.341329][T25477] lock(&ovl_i_mutex_dir_key[depth]); [ 663.346768][T25477] [ 663.346768][T25477] *** DEADLOCK *** [ 663.346768][T25477] [ 663.354901][T25477] 1 lock held by syz-executor.3/25477: [ 663.360345][T25477] #0: ffff8880a4708750 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x2270 [ 663.370846][T25477] [ 663.370846][T25477] stack backtrace: [ 663.377949][T25477] CPU: 1 PID: 25477 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 663.387223][T25477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.397288][T25477] Call Trace: [ 663.400573][T25477] dump_stack+0x197/0x210 [ 663.404894][T25477] print_circular_bug.isra.0.cold+0x163/0x172 [ 663.410954][T25477] check_noncircular+0x32e/0x3e0 [ 663.415877][T25477] ? print_circular_bug.isra.0+0x230/0x230 [ 663.421665][T25477] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 663.427108][T25477] ? alloc_list_entry+0xc0/0xc0 [ 663.431941][T25477] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 663.438173][T25477] ? find_first_zero_bit+0x9a/0xc0 [ 663.443270][T25477] __lock_acquire+0x2596/0x4a00 [ 663.448112][T25477] ? find_held_lock+0x35/0x130 [ 663.452860][T25477] ? mark_held_locks+0xf0/0xf0 [ 663.457618][T25477] lock_acquire+0x190/0x410 [ 663.462114][T25477] ? path_openat+0x1c1f/0x3490 [ 663.466871][T25477] down_read+0x95/0x430 [ 663.471008][T25477] ? path_openat+0x1c1f/0x3490 [ 663.476940][T25477] ? down_read_killable+0x490/0x490 [ 663.482158][T25477] path_openat+0x1c1f/0x3490 [ 663.486746][T25477] ? path_mountpoint.isra.0+0x370/0x370 [ 663.492548][T25477] ? security_prepare_creds+0x11d/0x190 [ 663.498090][T25477] ? prepare_creds+0x4bd/0x6b0 [ 663.503018][T25477] ? prepare_exec_creds+0x12/0xf0 [ 663.508044][T25477] ? __do_execve_file.isra.0+0x393/0x2270 [ 663.513839][T25477] ? __x64_sys_execve+0x8f/0xc0 [ 663.518687][T25477] ? do_syscall_64+0xfa/0x790 [ 663.523346][T25477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.529394][T25477] ? __kasan_check_read+0x11/0x20 [ 663.534399][T25477] ? __lock_acquire+0x8a0/0x4a00 [ 663.539318][T25477] do_filp_open+0x192/0x260 [ 663.543803][T25477] ? may_open_dev+0x100/0x100 [ 663.548473][T25477] ? mark_lock+0xc2/0x1220 [ 663.553655][T25477] ? __kasan_check_read+0x11/0x20 [ 663.558669][T25477] ? __do_execve_file.isra.0+0x7d4/0x2270 [ 663.564371][T25477] do_open_execat+0x137/0x690 [ 663.569042][T25477] ? unregister_binfmt+0x170/0x170 [ 663.574147][T25477] ? lock_downgrade+0x920/0x920 [ 663.578980][T25477] ? lock_downgrade+0x920/0x920 [ 663.583817][T25477] ? do_raw_spin_unlock+0x181/0x270 [ 663.589001][T25477] __do_execve_file.isra.0+0x16d5/0x2270 [ 663.594717][T25477] ? copy_strings_kernel+0x120/0x120 [ 663.600073][T25477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.606295][T25477] ? getname_flags+0x277/0x5b0 [ 663.611059][T25477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.617135][T25477] __x64_sys_execve+0x8f/0xc0 [ 663.621941][T25477] do_syscall_64+0xfa/0x790 [ 663.626454][T25477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.632337][T25477] RIP: 0033:0x45c6c9 [ 663.636220][T25477] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.655804][T25477] RSP: 002b:00007f7d8213cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 663.664203][T25477] RAX: ffffffffffffffda RBX: 00007f7d8213d6d4 RCX: 000000000045c6c9 [ 663.672156][T25477] RDX: 00000000200007c0 RSI: 0000000020000500 RDI: 0000000020000000 [ 663.680120][T25477] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 663.688076][T25477] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 663.696029][T25477] R13: 00000000000000a6 R14: 00000000004c3227 R15: 000000000076bf2c [ 663.768741][T25484] overlayfs: './file0' not a directory 21:18:03 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5be, 0x8080fffffffe) 21:18:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 663.798513][ T27] audit: type=1804 audit(1581974283.267:1036): pid=25491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/692/bus/bus/file0" dev="overlay" ino=16627 res=1 21:18:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200000010000008) socketpair(0x4, 0x1, 0xf4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x6) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) close(r9) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TCGETX(r12, 0x5432, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r10, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xfc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696cf7ff2c75707465726469723d2e2f66696c6530864247488f8ba1f8d983fe533e2cc33c2de437c1e57055d873715e2f5492e875c56782476d07a8f8654fa4fbb627e1a61174c8c362556659d84d5dff5cca7925ab9e667507facd3b4265d50400350f7581504a83157b95e97f3245379ab51ad80fd66590e03e0b088264cf2523b76609d384b286ded43e70b3dd7dcf2f7c1cd12e"]) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:18:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x40046208, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:18:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:18:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 664.168934][T25503] overlayfs: unrecognized mount option "upterdir=./file0†BGH‹¡øÙƒþS>" or missing value 21:18:03 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5c0, 0x8080fffffffe) [ 664.252958][ T27] audit: type=1804 audit(1581974283.717:1037): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/693/bus/file0" dev="sda1" ino=16528 res=1 21:18:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:18:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 664.494797][T25532] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 664.518205][T25532] FAT-fs (loop5): Filesystem has been set read-only [ 664.525732][T25532] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:18:04 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x5e0, 0x8080fffffffe) 21:18:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 664.745106][T25549] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 664.754384][T25549] FAT-fs (loop5): Filesystem has been set read-only [ 664.761269][T25549] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:04 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x600, 0x8080fffffffe) 21:18:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x40049409, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 664.964429][T25562] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 665.012904][T25562] FAT-fs (loop5): Filesystem has been set read-only [ 665.033883][T25562] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:04 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x700, 0x8080fffffffe) 21:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:18:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 665.342301][T25586] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) [ 665.350247][T25586] FAT-fs (loop5): Filesystem has been set read-only [ 665.357765][T25586] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) [ 665.366467][T25586] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) [ 665.375015][T25586] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) 21:18:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) getsockopt$inet_buf(r2, 0x0, 0x1e, &(0x7f0000000400)=""/236, &(0x7f0000000000)=0xec) mkdir(&(0x7f0000000880)='./file1\x00', 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f00000001c0)) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b7e69723d2e2f66696c65312c75707065726469513d2e2f66696c65306b69fba7bb16f13b938771410555408b4840c1c9fc3bb0f50b48b1da997602727e600d9f804cb44aa2e122792591cc25f2429dc88b63ff6221b898c3ac45e85939c2933be86d4e2bc3db58e9faa88aee5f5444db72d08c310a67134b195ad433747db1b7ca872cf84cc54350d3e98771c5f072e2fb0aad6933561d7966ac4be3c493d83d4bb81a107668ab8c01f8675a3e0f34dfe6b28b27bf0cbd1ae94c7c92e1b8b55536b35801fc470afaf15b53eda8046233530000000000005ab059b9770d86bf3560"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r8) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r9, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000680)={0x1, 0xfffffff8, {}, {0xee01}, 0x0, 0x8}) r12 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r13) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) r15 = getuid() r16 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r16, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r17) lsetxattr$system_posix_acl(&(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=r10, @ANYBLOB="02000100", @ANYRES32=r11, @ANYBLOB="02000200", @ANYRES32=r13, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=r14, @ANYBLOB="02000000", @ANYRES32=r15, @ANYBLOB="02000500", @ANYRES32=r17, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040004000000000010000400000000002000030000000000"], 0x74, 0x2) 21:18:04 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xa00, 0x8080fffffffe) 21:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:18:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4004ae8b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 665.675198][T25606] overlayfs: unrecognized mount option "work~ir=./file1" or missing value 21:18:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 665.810349][ T27] audit: type=1804 audit(1581974285.277:1038): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/file0" dev="sda1" ino=16525 res=1 [ 665.912935][ T27] audit: type=1804 audit(1581974285.277:1039): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/file0" dev="sda1" ino=16525 res=1 [ 665.915978][T25620] overlayfs: unrecognized mount option "work~ir=./file1" or missing value 21:18:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 666.021572][ T27] audit: type=1804 audit(1581974285.327:1040): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/file0" dev="sda1" ino=16525 res=1 21:18:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 666.132366][ T27] audit: type=1804 audit(1581974285.327:1041): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/file0" dev="sda1" ino=16525 res=1 21:18:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 666.196919][ T27] audit: type=1804 audit(1581974285.337:1042): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/file0" dev="sda1" ino=16525 res=1 [ 666.267726][ T27] audit: type=1804 audit(1581974285.607:1043): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/bus/file0" dev="sda1" ino=16557 res=1 21:18:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:05 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xf00, 0x8080fffffffe) 21:18:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 666.336548][ T27] audit: type=1804 audit(1581974285.617:1044): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/bus/file0" dev="sda1" ino=16557 res=1 [ 666.412856][ T27] audit: type=1804 audit(1581974285.617:1045): pid=25606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/bus/file0" dev="sda1" ino=16557 res=1 [ 666.519403][ T27] audit: type=1804 audit(1581974285.667:1046): pid=25620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/bus/file0" dev="sda1" ino=16557 res=1 [ 666.608501][T25647] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) [ 666.622907][T25647] FAT-fs (loop5): Filesystem has been set read-only [ 666.646623][ T27] audit: type=1804 audit(1581974285.667:1047): pid=25620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir246676649/syzkaller.EejK08/694/bus/bus/file0" dev="sda1" ino=16557 res=1 [ 666.695833][T25647] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) 21:18:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b640deb0fd3088bb88a65312c75707065726469723d2e2f66696c6530"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) pwrite64(r2, &(0x7f00000001c0)="b74389fb9186addeeaacaee2fe4b8f557ab90610ebe06bfcaa68295d6bb82bd69a529d30d18703f9195e0211a9dfc79067541332bda3c2d65b2780a5a6111fdbfd2bb247e74a4e6ef407ff389e75957a4533fc81a8469bbf635c722fe1ce93f65732659f4e0c5242386b283ef3261fe57980da85", 0x74, 0x80) 21:18:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4004ae99, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 666.718520][T25647] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) 21:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xf0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 666.763544][T25647] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000aa4) 21:18:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 666.883232][T25660] overlayfs: unrecognized mount option "workd ëÓ‹¸Še1" or missing value 21:18:06 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x3f00, 0x8080fffffffe) 21:18:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) [ 667.036843][T25671] overlayfs: unrecognized mount option "workd ëÓ‹¸Še1" or missing value 21:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x300, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x408, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:18:06 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x4000, 0x8080fffffffe) 21:18:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x40186366, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="fa53f5c9672f9940bcc491447dca83f22af8f2249ee4b86912b05f1d044cdcb09913e54382f8e4f861d300d05bdb1281abf6be539fab57b68e06f94ecd58a1490546fac941c6d6fd58a03b39bba3d837e8d2b3394bc2d35b731c59e2a5b9064942aca6b28aa5abfd2121eb1bd3f2cb3c0f819d428f9976be199cf97d78db5a2e90f1cd848da8c3b5584fd861d03b40aafd8c2b1f90b49ac32ef9beed27db6ec580c9e1b24ba2bfd012c5086353297389f16bbf360e30ebdb45b11066578913aba1fe56195a7e796eb042f512c283faff502781a6022392de4b5ecbb4ea5f9489688a621fac7c170937a127b4dbc0a0ffbdd6439d9dfae0f78be1a5aa191ab55d05fa73394bdc91c49def2cc42e59f2c9554a9ff428422e98f0874241ad72f5426b3044e1854ac25c1d421acb04f03c73bdc6b205d4e51ffbcfb4fb864d98a8414965b694150acb44218289cb79347da10f9032dfa4f40454dc2f64c246c20c56bc0ec3055dbbe278c585331b7265da296d994619343fc507c45a1a617fc144190a9b1a52953a1b66dddec703c7811f81703a2c4a20d85c6ff3c7edf666e8b1e39f844fc9919986a99f1fbe2c94af76e2664a6dfc372c87dd23ff6e57e6d78b9783be72da9242114a00f25e616d538ca038e0d92f08fdd12c99aaf13cdbeea76f4af8a80d3c6d22c392520c717a2d37e8dc061cebf88fa079aeaec35f1971e257744725e3f9344f65126cbed2ef30f10ebe390280b3715926051aa229a9207d3274fc13c2e61e8a3fccbfe6bc4aed641c02c657fb9a84ea49221e87878119c0eb20251c070ec2a8009d0a959bf0ada574c22df4b682cad0885580aece4fe83178f50559990e3d34c1196e74e28cc9b4364faf3261e91625f42924a238684e16733d53ddc812193726dac52a753c9143f010c9efb9feecf0a96dd62d955c69cb25c76b036e10f6d5b40f2e01a8993e1f99b552bd9a8c64f5fac5f90163e59af8b88e0dfdf7a2e32aa8ff0e1b414ab1139b182100027309012be6f970d63dc7811c91056567d7cbb2297b720bc2781b99a4fc751839c2d63050bd513f334ce9f2b7b1beb9688db860b23fb71217898cfbd4c2347e3314e40f941623d3155b02dc930c14535cfe2de00969fb2d64aca31fcd5af6a216e579fdd59e9773d11cdf77cca664e60377b18d22eb49d3624722197ec264c2b901eeba33e142b5aeb5a60aaa6e35664092148f6d788245dc2742b286c394f981dc3cd625485baf2255820b1f679391b8acac73423743f0a729a4c1d33af059b1ae311407dbd64b780ee4d38c55c65e04c4ca31122bf7a1a6c9da0bdbb5f94aa862154bb2e474f1476aa695dca879581b566eddba7ff91474c9c0c46652d527313767eaee0219709a038fcb1e373274963d8f70de0aaefd38585c48f257be508540333aa5f1686972aa2afe38294b3fa9d24980cf6f7c7ed3e3c3cb59021fbaf094159683b1ad0ff9ef15247e93350f1076252f0f8775854069e8a31474e6445b59d0597ab45a380953531269c50203df83073d9027aa08eefe53c853d3c34fdf92172b3cd0afa9ecd42a7a8ec6e747bbed5154cca0a015a4dea7b5c9e470b61ab2eb3b94881aabeefca4752682d656e0a0667ca2e42f17fa0fb99f0de6be8e2b3d96f59561beca72c1e990e2f856f867745732b21270713c25b35995ba4a7ce0cf94538792d9c5f18ffb5200e00e9358e597d6642158567e101fdce48bdbda41327b6306df21317cc3df3302ba309e394b6f8ec5b32d8fad2c467fdbe726ec72822e38ddb5374359a22382105d5a2c617c16e84ad4f21102b0c9c4b48ae6e6cb0dc84345c871df636edc7c5a67ff175cd4bfbe9692ccef5aaa03b03ca09338831a78511609f84bc208eb05351ad94e1b260bf9d5edc01cb024ecf80edfdd3cc5b6b358fbe267de55d7f10b7a128c2bdc97f2ca6af4e3c63378cffe3dc3441b5ca0fde66bf074b671a7bb3ac2de37ccb54892f5a490b67f57911c72cf1c25ec3b599d3c1a39580133da87864571ccc106ddcab9e0df34211294da685246bb10fa562e8b14f5c81e27e2305ec7cb218a0ff55e02cb09d7b6ed3441811594d9907095bbbd1fbfd07bab011b3f44771d9486eea5be9b49cfc95a2184b26df213e24c6b5f77699bffa59d91ffd3d5a2452bb13db34064d557de0d34adff370aa7028f76c7c8ccbec5397ca946a56c2de3013d3aeb83c23edde5a8243243ce2f8e314ec3bfadc1af0267f2e97621e76f142a75128a575cc40630a41f51dd5cf36b5f8e4f61b1eb3e5632c6da2324215a1e860f0e3683c877603bc118a34b0d99cc7dc0f22e767b1803dcb5489d4e9272d2559282d00c6de075b51f594bcfafa822932685a10da9fec8bfd2aba48638d220046f43972e64c442460087a2db5909c0ab541e09078a908820f53c0e692e398e77fe4babfb2bb40a6cfdce98f94238813c3cfb30f38ae6b4c5b392a96803ecebb9"]}]}, 0x804}], 0x1}, 0x0) 21:18:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000300)={0x80, 0x1, 'client0\x00', 0x8000000040000004, "351d2936436f01f1", "f407000000fa71d5e4a5da864b3d2624ee00", 0x3, 0x4c81}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') getegid() r6 = getegid() setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c141b46ff57aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, r6) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:18:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x500, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:18:07 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xf0ff, 0x8080fffffffe) [ 667.648999][T25712] overlayfs: './file0' not a directory 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:18:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x600, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2}, 0x30) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) write$binfmt_elf32(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7f, 0x2c, 0x0, 0x5e0, 0x3, 0x0, 0x20, 0xbd, 0x38, 0x1a8, 0x228, 0x3, 0x20, 0x1, 0x2, 0x80, 0x6b}, [{0x6474e551, 0x0, 0x8, 0x4, 0x8, 0x10001, 0x0, 0x101}], "d022db5352fca2e782602758d1ea1e23040ab1bd915a1ac1cb0949ceb74208a6437a4fd47d8be5e3623bf8211abece637ae9d8855dde5178e2fe9d40155881ffbbe43e9e75f0d55fec4a8e4207e39ca263225caab4d08c7dc552c2a05282ed022a96d175d848ffac26248d6d2e751d277768aeb12ab76d3bad442b4f914e3a5ec2ab23dce390572c0ffddec491f1c0faa8ebe3ed388be054904ddbd8e56cf9a7043623a24fed6d6bb0d291595fb4c547b8", [[], []]}, 0x309) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400, 0x0) accept4$ax25(r4, 0x0, &(0x7f0000000200), 0x80800) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:18:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4020940d, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:18:07 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xffffffff000, 0x8080fffffffe) 21:18:07 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000380)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x19}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x81) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:textrel_shlib_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x2404d055) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:18:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x700, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x12) [ 668.163838][T25741] overlayfs: './file0' not a directory 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:18:07 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000002) 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:18:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x804, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) 21:18:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x40305828, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) [ 668.569039][T25779] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 668.577941][T25779] FAT-fs (loop5): Filesystem has been set read-only [ 668.584849][T25779] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 668.651922][T25790] overlayfs: './file0' not a directory 21:18:08 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000003) [ 668.908153][T25804] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 668.917116][T25804] FAT-fs (loop5): Filesystem has been set read-only [ 668.925807][T25804] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) 21:18:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r3, &(0x7f00000013c0)=[{&(0x7f0000000100)="033185778502bd1c704ab379db44a8077b4b104c00d0d819b753eab5cded99fe152e0915a13a1df2a8dfc6ecd0b23cf01557ba9611aa6a1d4a7ff97d0d176c", 0x3f}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000001c0)="44ed75501fe4886080a2b82382b2628d770330a76b12048649e8a287bcbccdaf892cc763bd818be4acca61cb7fb21200e65313e6f7ab", 0x36}, {&(0x7f0000001300)="606ea40355897bf9fa206e0fe3f8feba21190babef346f27dbf9e45250aa07138eed8a28c4770b927ba31029229d8d7edc7bcbd93a01a3f01bb5baef9c28a9b953c38f144b84726a75aac6960ab1ec3c5f13d5130ea45e3a2be3fa35fb1d63e61baf76c7c66441e7adb62f241535e92845f9a1d2689e240530738ce7317c93667e4faba4fd6053e0", 0x88}, {&(0x7f0000000200)="da412649d0d5cd95d748e7182f12184296911c468d4e324939d84a8f1531d2740278bd9802713293748e9a3436237fba57d9f6b2c0b1f96bb3abc3a37607fc", 0x3f}], 0x5) r4 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000001440)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f777e7222c8e0ff2e2f6275732c776f726b0200000000000000772e2fab5a9ec920a8cb77c8a4fa3fc67666"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:18:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0x900, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x4040ae77, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:08 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000004) 21:18:08 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETBLKSIZE(r9, 0xc0045004, &(0x7f0000000040)) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:18:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2]}}, 0xe0}}, 0x0) 21:18:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xa00, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 669.095065][T25818] overlayfs: unrecognized mount option "low~r"Èàÿ./bus" or missing value [ 669.219037][T25826] overlayfs: unrecognized mount option "low~r"Èàÿ./bus" or missing value [ 669.267221][T25822] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:18:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xe0}}, 0x0) [ 669.319470][T25834] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 669.328581][T25834] FAT-fs (loop1): Filesystem has been set read-only [ 669.335783][T25834] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 669.346240][T25822] FAT-fs (loop5): Filesystem has been set read-only 21:18:08 executing program 1: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9c0000, 0x0, 0x100, r3, 0x0, &(0x7f0000000080)={0xa2095b, 0x4, [], @p_u16=&(0x7f0000000040)=0x56d}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)={0xc6, 0xfff, 0x6, "76829931a7a888a7635fa53c34c37515ed04e7ad63a401df60364d306afee174f00e86a8e108c0f7c18bc4d62d1a528c358cdfde2b745e5ee13b06190fcebd2bc4942d67644d6e95d3adee4f1a8e77ebbec4933ab2fc7f071ebba5c25549162d5149a896325b24d165a095e476bdb342372d9c800e1f1046218aa3ebe52ff05b0295cb117091ff58b75f79a3ae04a3c9a7ede02a2b45887089e196ab4a5d12542c1572f94b8da85366f7254172f8c09ef8dc601057bb0a499d63bfeffd1ed21cceade0753ae4"}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r6, &(0x7f0000000980), 0x10a9) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r6, r6, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:18:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x10300) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @empty, 0x1}, 0x10) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x205069, &(0x7f0000000000)=ANY=[@ANYBLOB="698e382e2f6275732c776f726b6469723d2e2f66696c65312c00000000000000"]) chdir(&(0x7f00000002c0)='./bus\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4a0000, 0x165) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24048005) [ 669.385966][T25822] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000020) 21:18:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xb00, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 21:18:08 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x808000000005) 21:18:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 21:18:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r6, 0x0, r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) r8 = getpid() pidfd_open(r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0x40445637, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)={0x804, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ff3900a0e7044d98e58be58b4a7664a1c485c65e0a971a61b49753ebeaee27953547a4d709c700026f387a4bfdf72df254bcdca310d7321b6502146e5b58504bfe5edbffffb0cb7daf68f52bbe79064bee61acdea3b430696ce7ecef960c2d9e2090632716d75328857d3ccd2fc7babfd6c16a20ed6af483d22a6625ffc58aece4dbb23e7edfd7c4870c06687d8526f1512470", @nested={0x753, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8d3edbd8eea252b22bfaae47c82c23754aa7808b956afe31b406ada5c642d753529e9289d8e32362a5772238649522b6758a4ea05c9655851ae1dd2c4417d7586134070d7a257c95407db3fce4f12340aaa7c822f2f6471133ce5f7a093ff126c05b26b6", @generic="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"]}]}, 0x804}], 0x1}, 0x0) 21:18:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@upd={0xe0, 0x12, 0x7ccfc11a7d3f3027, 0x0, 0x0, {{'drbg_nopr_ctr_aes192\x00'}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xe0}}, 0x0) [ 669.634966][T25853] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 21:18:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912,