0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) sendmsg$unix(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) [ 239.723761][ T6023] overlayfs: missing 'lowerdir' 06:46:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 06:46:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @dev}, 0xc) 06:46:41 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x2230}}], 0x1, 0x200400d4) 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:41 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0xffffff1c) [ 239.898965][ T6033] overlayfs: missing 'lowerdir' 06:46:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000006680)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000066c0)={r2, r3+60000000}) 06:46:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:41 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:41 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f2aee4e4219777fd0cf40f80a1750f4901aeb0da88c006de5aafa6a60a92ebd3fce5e61e9cb2088fc4c50e0fad98fc4d54c757b505fdc720544fd73e65f0aa8c49cd9c71d56195160cfbb43c3542b3", 0xfffffffffffffe98}, {&(0x7f00000000c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40c5) 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:41 executing program 5: r0 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 240.104024][ T6050] overlayfs: unrecognized mount option "workdi" or missing value 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:41 executing program 5: r0 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x16, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, 0x0, 0x0) 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 240.354896][ T6065] overlayfs: unrecognized mount option "workdi" or missing value 06:46:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x80019e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4e141, 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x401ffc000) 06:46:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:41 executing program 3: socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = open(&(0x7f0000000040)='./bus\x00', 0x145642, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x7, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/113, 0x71}, {0x0}, {&(0x7f0000000540)=""/173, 0xad}, {0x0}, {&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/59, 0x3b}, {0x0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r0, 0x610004) sendfile(r1, r0, 0x0, 0x80001d00c0d0) 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:41 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:41 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x7, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 240.581470][ T6086] overlayfs: unrecognized mount option "workdi" or missing value 06:46:42 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xa, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 240.764610][ T6098] overlayfs: missing 'lowerdir' 06:46:42 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 241.391446][ T6085] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 241.416837][ T6085] CPU: 1 PID: 6085 Comm: syz-executor.3 Not tainted 5.16.0-rc6-syzkaller #0 [ 241.425557][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.435629][ T6085] Call Trace: [ 241.438925][ T6085] [ 241.441864][ T6085] dump_stack_lvl+0x201/0x2d8 [ 241.446734][ T6085] ? show_regs_print_info+0x12/0x12 [ 241.451931][ T6085] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 241.457694][ T6085] warn_alloc+0x221/0x370 [ 241.462034][ T6085] ? zone_watermark_ok_safe+0x280/0x280 [ 241.467584][ T6085] __vmalloc_node_range+0x7c5/0x960 [ 241.472785][ T6085] ? netlink_sendmsg+0x6f4/0xe60 [ 241.477800][ T6085] vmalloc+0x75/0x80 [ 241.481683][ T6085] ? netlink_sendmsg+0x6f4/0xe60 [ 241.486613][ T6085] netlink_sendmsg+0x6f4/0xe60 [ 241.491389][ T6085] ? netlink_getsockopt+0xa60/0xa60 [ 241.496612][ T6085] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 241.502015][ T6085] ? security_socket_sendmsg+0x9d/0xb0 [ 241.507536][ T6085] ? netlink_getsockopt+0xa60/0xa60 [ 241.512720][ T6085] kernel_sendmsg+0xf5/0x130 [ 241.517346][ T6085] sock_no_sendpage+0x153/0x1c0 [ 241.522203][ T6085] ? __receive_sock+0x90/0x90 [ 241.526867][ T6085] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 241.532864][ T6085] ? __lock_acquire+0x2b00/0x2b00 [ 241.537899][ T6085] ? print_irqtrace_events+0x220/0x220 [ 241.543359][ T6085] kernel_sendpage+0x2ca/0x370 [ 241.548113][ T6085] sock_sendpage+0x7e/0xb0 [ 241.552519][ T6085] pipe_to_sendpage+0x258/0x340 [ 241.557416][ T6085] ? sock_fasync+0xf0/0xf0 [ 241.561818][ T6085] ? generic_splice_sendpage+0x210/0x210 [ 241.567442][ T6085] __splice_from_pipe+0x351/0x8b0 [ 241.572473][ T6085] ? generic_splice_sendpage+0x210/0x210 [ 241.578121][ T6085] generic_splice_sendpage+0x181/0x210 [ 241.583582][ T6085] ? iter_file_splice_write+0xfa0/0xfa0 [ 241.589141][ T6085] ? iter_file_splice_write+0xfa0/0xfa0 [ 241.594869][ T6085] direct_splice_actor+0xe6/0x1c0 [ 241.599940][ T6085] splice_direct_to_actor+0x529/0xd00 [ 241.605311][ T6085] ? do_splice_direct+0x3e0/0x3e0 [ 241.610328][ T6085] ? pipe_to_sendpage+0x340/0x340 [ 241.615462][ T6085] ? rcu_lock_release+0x9/0x20 [ 241.620272][ T6085] ? __lock_acquire+0x2b00/0x2b00 [ 241.625402][ T6085] ? __lock_acquire+0x1382/0x2b00 [ 241.630411][ T6085] ? bpf_lsm_file_permission+0x5/0x10 [ 241.635970][ T6085] ? security_file_permission+0xe0/0x5d0 [ 241.641596][ T6085] do_splice_direct+0x291/0x3e0 [ 241.646440][ T6085] ? splice_direct_to_actor+0xd00/0xd00 [ 241.651984][ T6085] ? bpf_lsm_file_permission+0x5/0x10 [ 241.657353][ T6085] ? security_file_permission+0xe0/0x5d0 [ 241.662977][ T6085] ? do_sendfile+0x6a9/0x1040 [ 241.667723][ T6085] do_sendfile+0x6fe/0x1040 [ 241.672256][ T6085] ? do_pwritev+0x370/0x370 [ 241.676817][ T6085] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 241.682806][ T6085] __se_sys_sendfile64+0x171/0x1d0 [ 241.687911][ T6085] ? __x64_sys_sendfile64+0xa0/0xa0 [ 241.693117][ T6085] ? lockdep_hardirqs_on+0x95/0x140 [ 241.698335][ T6085] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 241.704309][ T6085] do_syscall_64+0x44/0xd0 [ 241.708833][ T6085] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 241.714755][ T6085] RIP: 0033:0x7f12b492ee99 [ 241.719176][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.738867][ T6085] RSP: 002b:00007f12b32a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 241.747392][ T6085] RAX: ffffffffffffffda RBX: 00007f12b4a41f60 RCX: 00007f12b492ee99 [ 241.755355][ T6085] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 241.763309][ T6085] RBP: 00007f12b4988ff1 R08: 0000000000000000 R09: 0000000000000000 [ 241.771270][ T6085] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000000 [ 241.779248][ T6085] R13: 00007fffdd1fa36f R14: 00007f12b32a4300 R15: 0000000000022000 [ 241.787234][ T6085] 06:46:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)={[], [{@context={'context', 0x3d, 'user_u'}}]}) 06:46:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) [ 241.797363][ T6085] Mem-Info: [ 241.800515][ T6085] active_anon:346 inactive_anon:158911 isolated_anon:0 [ 241.800515][ T6085] active_file:4154 inactive_file:69739 isolated_file:0 [ 241.800515][ T6085] unevictable:768 dirty:94 writeback:0 [ 241.800515][ T6085] slab_reclaimable:19159 slab_unreclaimable:96470 [ 241.800515][ T6085] mapped:28850 shmem:1724 pagetables:1310 bounce:0 [ 241.800515][ T6085] kernel_misc_reclaimable:0 [ 241.800515][ T6085] free:1249264 free_pcp:10882 free_cma:0 [ 241.913816][ T6085] Node 0 active_anon:1380kB inactive_anon:635000kB active_file:15668kB inactive_file:271688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110168kB dirty:160kB writeback:0kB shmem:4628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 268288kB writeback_tmp:0kB kernel_stack:10288kB pagetables:5220kB all_unreclaimable? no [ 241.961140][ T6085] Node 1 active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 241.991479][ T6085] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.020127][ T6085] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 242.025986][ T6085] Node 0 DMA32 free:1047528kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:1380kB inactive_anon:635000kB active_file:15668kB inactive_file:271688kB unevictable:1536kB writepending:160kB present:3129332kB managed:2705604kB mlocked:0kB bounce:0kB free_pcp:38452kB local_pcp:21468kB free_cma:0kB [ 242.057488][ T6085] lowmem_reserve[]: 0 0 1 1 1 [ 242.062230][ T6085] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.090824][ T6085] lowmem_reserve[]: 0 0 0 0 0 [ 242.095563][ T6085] Node 1 Normal free:3941904kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:4kB inactive_anon:724kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6112kB local_pcp:2688kB free_cma:0kB [ 242.125114][ T6085] lowmem_reserve[]: 0 0 0 0 0 [ 242.129890][ T6085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.142709][ T6085] Node 0 DMA32: 146*4kB (UM) 178*8kB (UE) 313*16kB (UME) 448*32kB (UE) 80*64kB (UME) 9*128kB (UE) 2*256kB (ME) 1*512kB (U) 1*1024kB (U) 7*2048kB (UME) 245*4096kB (UM) = 1047528kB [ 242.160737][ T6085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 242.172311][ T6085] Node 1 Normal: 124*4kB (UME) 34*8kB (UME) 23*16kB (UME) 155*32kB (UE) 51*64kB (UE) 23*128kB (UME) 10*256kB (UME) 4*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 957*4096kB (M) = 3941904kB [ 242.191282][ T6085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.201750][ T6085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.211187][ T6085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.220862][ T6085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.230220][ T6085] 13173 total pagecache pages [ 242.234905][ T6085] 0 pages in swap cache [ 242.239116][ T6085] Swap cache stats: add 0, delete 0, find 0/0 [ 242.245183][ T6085] Free swap = 0kB [ 242.248985][ T6085] Total swap = 0kB [ 242.252699][ T6085] 2097051 pages RAM [ 242.256490][ T6085] 0 pages HighMem/MovableOnly 06:46:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:43 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xb, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 242.261556][ T6085] 387049 pages reserved [ 242.265796][ T6085] 0 pages cma reserved 06:46:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x72, 0x0, 0x0) 06:46:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000b80), 0x4) 06:46:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) [ 242.340634][ T6116] overlayfs: missing 'lowerdir' 06:46:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:43 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x22, 0x0, 0x0) [ 242.385516][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 242.385531][ T25] audit: type=1804 audit(1640155603.741:40): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/183/bus/file0" dev="sda1" ino=1169 res=1 errno=0 06:46:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x13, 0x0, 0x0) 06:46:43 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000001780)="01", 0x1}], 0x1}, 0x4000040) 06:46:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)='s', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) [ 242.552297][ T6133] overlayfs: missing 'lowerdir' 06:46:44 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2522c0, 0x0) [ 242.600173][ T25] audit: type=1804 audit(1640155603.961:41): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/184/bus/file0" dev="sda1" ino=1164 res=1 errno=0 06:46:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x7, 0x0, 0x0) 06:46:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) [ 242.790363][ T6150] overlayfs: unrecognized mount option "lower" or missing value 06:46:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:44 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) rmdir(&(0x7f0000000000)='./file0\x00') 06:46:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1, 0x9f, 0x0) [ 242.838274][ T25] audit: type=1804 audit(1640155604.201:42): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/185/bus/file0" dev="sda1" ino=1176 res=1 errno=0 06:46:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:44 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001380)="ff", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x2, 0x0) 06:46:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 06:46:44 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x4143, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='udf\x00', 0x0, 0x0) 06:46:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:44 executing program 5: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f00000003c0)) 06:46:44 executing program 3: mq_open(&(0x7f0000000180)='+S*\x00', 0x40, 0x0, &(0x7f00000001c0)={0xce8, 0x10000, 0x380, 0x5d}) 06:46:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) [ 243.012630][ T6169] overlayfs: unrecognized mount option "lower" or missing value 06:46:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 243.076509][ T25] audit: type=1804 audit(1640155604.431:43): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/186/bus/file0" dev="sda1" ino=1169 res=1 errno=0 06:46:44 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r0}) 06:46:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @rand_addr=0x64010100}, 0xc) 06:46:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0xa, 0x0, 0x0) 06:46:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000003fc0)={0x0, @can, @nfc, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}}) [ 243.180639][ T25] audit: type=1800 audit(1640155604.431:44): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1183 res=0 errno=0 06:46:44 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@obj_role={'obj_role', 0x3d, '/dev/nvram\x00'}}]}) 06:46:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 06:46:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2103, 0x0) [ 243.278122][ T6191] overlayfs: unrecognized mount option "lower" or missing value 06:46:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000002540)="ff", 0x1) 06:46:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 243.311191][ T25] audit: type=1804 audit(1640155604.671:45): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/187/bus/file0" dev="sda1" ino=1185 res=1 errno=0 06:46:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x340, 0xe8, 0x0, 0xffffffff, 0x0, 0xe8, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @local, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "70aa35c9ab79202f63424270a9cbd3fc3d9e4cc0a90007cc07a02964f79a"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 06:46:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001b80)={0x0, @l2tp, @can, @can}) [ 243.398381][ T6201] tmpfs: Unknown parameter 'obj_role' 06:46:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:44 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000240)={0xb}, 0xb) 06:46:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@x25, 0x80) [ 243.490665][ T6208] overlayfs: unrecognized mount option "lowerdir" or missing value 06:46:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd080000000000baa1068ee0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb62842700f5ff0000fd85916e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea00060000000000000000000000010000000005000000000000000000000000000000000000a3ee0100000001"], 0xb8}}, 0x0) [ 243.542746][ T25] audit: type=1804 audit(1640155604.901:46): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/188/bus/file0" dev="sda1" ino=1190 res=1 errno=0 06:46:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 06:46:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0xb0, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 06:46:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 06:46:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd080000000000baa1068ee0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb62842700f5ff0000fd85916e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea00060000000000000000000000010000000005000000000000000000000000000000000000a3ee0100000001"], 0xb8}}, 0x0) 06:46:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write(r0, &(0x7f0000000340)="bb57ad7c8a0aa58f4f3e75bc1fd8b445077d7f32cff1c2fe706f252c3043a11def2e236d6b2bfbd57a0ce30363898101a68fd0557d300e4d2fbfddbb9cd77a4cea0d48d061fcea556ac2e7b7d4da0d7d9211e29c1238320dc50fd341fe3be0", 0x5f) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 06:46:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f00000003c0)="cf", 0x1, 0xfffffffffffffffb}], 0x0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x30]}}]}) [ 243.750321][ T6228] overlayfs: unrecognized mount option "lowerdir" or missing value [ 243.769302][ T6233] tmpfs: Bad value for 'uid' 06:46:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1, 0x146, 0x0) 06:46:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 243.797102][ T25] audit: type=1804 audit(1640155605.151:47): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/189/bus/file0" dev="sda1" ino=1164 res=1 errno=0 [ 243.823424][ T6235] loop2: detected capacity change from 0 to 512 06:46:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100), 0x4) [ 243.862836][ T6238] loop0: detected capacity change from 0 to 16383 06:46:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000015c0)='./file1\x00', &(0x7f0000001600)=@known='system.posix_acl_default\x00', 0x0, 0x0) 06:46:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/234, 0xea}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/26, 0xfffffffffffffd9c}, {&(0x7f0000000400)=""/100, 0x64}], 0x8, &(0x7f0000000500)=""/163, 0xa3}, 0x0) [ 243.958523][ T6246] overlayfs: unrecognized mount option "lowerdir" or missing value 06:46:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]}) 06:46:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x10}}], 0x28}, 0x0) [ 244.003707][ T25] audit: type=1804 audit(1640155605.361:48): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir123580883/syzkaller.sBiw9y/180/file0/bus" dev="sda1" ino=1187 res=1 errno=0 06:46:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) [ 244.074064][ T6257] tmpfs: Unknown parameter 'context' [ 244.087713][ T25] audit: type=1804 audit(1640155605.391:49): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/190/bus/file0" dev="sda1" ino=1196 res=1 errno=0 [ 244.123984][ T6235] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:46:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0xd, 0x0, 0x0) 06:46:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x8, {0x2, 0x0, @empty}, 'syzkaller1\x00'}) 06:46:45 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) [ 244.182640][ T6262] tmpfs: Bad value for 'mpol' 06:46:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) listen(r0, 0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000840)={r2, 0x0, "a7ad8161d1bad8c38359d582c67d0dc320ef72f02ae3fb81e40a2165e2e9b150fadee0a3f5e75b694a5a3193da3ac82e7c49fcdac704d2d5652d8865e76b5b1fad6f770b50dc6832ca8bb2c656e648adc1b5f4015c0013e46a1160d367c37f2db897ec13f5f55a3dbead97324767d4c754c233dcb5e8da13894b475bfa9dca7da3ee64aad034c9d6263b1c352df0588db5dca8084ad77c7257bc26daf7dfa788b98d3bd7f3b5ea9714822c6d4d02003d44d2cc9d0fb94aa277b6e8567dbe38219bae7210b130724250de62f67b01b5fbf75d54247aa3d6f23416118a003d1589a9ba8d8d302af0e8116228c4edff90a1bccb0f9ad1c0c7472f0990a465cdb6b8", "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"}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="df", 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) dup3(0xffffffffffffffff, r0, 0x0) r3 = eventfd(0x400) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) 06:46:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 244.263943][ T6269] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:46:45 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) 06:46:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 244.368802][ C1] sd 0:0:1:0: tag#524 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 244.378686][ C1] sd 0:0:1:0: tag#524 CDB: opcode=0xe5 (vendor) [ 244.385035][ C1] sd 0:0:1:0: tag#524 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 244.394032][ C1] sd 0:0:1:0: tag#524 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 244.403001][ C1] sd 0:0:1:0: tag#524 CDB[20]: ba 06:46:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, 0x0, 0x0) 06:46:45 executing program 0: clock_gettime(0x7504085b75d78821, 0x0) [ 244.533928][ T6282] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:46:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x15, 0x0, 0x0) 06:46:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 06:46:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x6, 0x0, 0x0) 06:46:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:46:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2b, 0x0, 0x0) 06:46:46 executing program 5: syz_io_uring_setup(0x4fe5, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x3e1a, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 06:46:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000480)='./file0\x00', 0x0) 06:46:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="d000000000000000150000000000000096b1feddf4a8b79fd097c34a821e47db6b23625230215bb149be4c6229440754e7fd3d8aed0663e13dafbd159fd6c6e35fa705ed6d3478b9b1be6f1334f83f2880909d8b7a169987d1c4c9324c29652e363c87bd257c4627a66f2ba1cd7bc35fcd3d7c127fbc2b646ceef72079b148fb6000bce9241c013adaf3cde8f5bfb0fa873599819f10d4923f783b92fc761934c8064cfeaf1d7448ee7461228f30dc96e88285a3cbabb8748dcf234fd5f00baae1dca61775b50af7619ed800000000006800000001"], 0x138}}], 0x2, 0x0) [ 244.758207][ T6301] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:46:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 06:46:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x11, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x0) 06:46:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') 06:46:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)={[], [{@fscontext={'fscontext', 0x2c, 'user_u'}}]}) 06:46:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000500)='./file0\x00', 0xee00, 0xee00) 06:46:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x0) 06:46:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x25, 0x0, 0x0) 06:46:46 executing program 0: syz_io_uring_setup(0x4fe5, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x4fe5, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x451e, &(0x7f0000000640), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 06:46:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 245.000769][ T6324] tmpfs: Unknown parameter 'fscontext' 06:46:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xb, 0x0, 0x0) 06:46:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)=ANY=[@ANYBLOB="6273636f6e746578744cd1392c89520000000000dc2e9d1228b81d8f9591f9e995424e00"]) syz_io_uring_setup(0xeac, &(0x7f0000000000)={0x0, 0x1961, 0x1, 0x2, 0x361}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7fff) 06:46:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 06:46:46 executing program 5: mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 06:46:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@memory_recursiveprot}], [{@obj_role}]}) 06:46:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x0) [ 245.182861][ T6339] tmpfs: Unknown parameter 'bscontextLÑ9' 06:46:46 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x80) 06:46:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 245.301906][ T6348] 9pnet: Insufficient options for proto=fd [ 245.309129][ T6347] cgroup2: Unknown parameter 'obj_role' 06:46:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x3, 0x0, 0x0) 06:46:46 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000007c0)) 06:46:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x7, 0x0, 0x29) 06:46:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:46:46 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 06:46:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sendmsg$unix(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) [ 245.465243][ T6357] 9pnet: Insufficient options for proto=fd 06:46:47 executing program 0: r0 = getpgrp(0x0) r1 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x3, 0xffffffffffffffff, 0x0) 06:46:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}, {0x10, 0x84, 0x6}], 0x20}, 0x0) 06:46:47 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="73d967fd36072f7ba690c44a595263bbe00d503616", 0x15}, {&(0x7f0000000100)="568f1fe8520f3c231931", 0xa}, {&(0x7f0000000140)="20574cc09d64dbffc12cd5d09c6c287e9b408b3a59582b95536466c590d3f181694bfb17390280069171b31ff2c8af756ef62d159950eb2f2c765d61525fb68aea0e16b632fca83bcc0f0e636cbaeceb8528d0dbdf0e7da4d88d706a860ea7ebcc732c26efb2e06b8e9e476c4d3cc7d871795775806343415b03527ec590e85eade43533d29c1868607f07fa72855e95aabef02970", 0x95}, {&(0x7f0000001b00)="2a7e3f43017ad76b5cfe0b1225555895b645fa8d74220a8810f97b490a9745f7de6b837c7e0ed5b7605d740ce3ca7c67e9ec23793d609192b538e72c5e43e995ef86803fab506f3b5695ba162e8a89b6f9597e8970a9df1cb8714c69b9c0cff123efd8461e5d85707b4ad0ce70607881713df2876ac04669956a0478e0b7fff4379edece7ace43f467a5c98a9149a2f22e6eba8e0f2325146d3f9d3565d419ea5f1755fec891fca2f4006297a2d2a7022c5abb9554dd08b467", 0xb9}, {&(0x7f0000000280)="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", 0x249}], 0x5}, 0x0) recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000013c0)=""/213, 0xd5}, {&(0x7f00000014c0)=""/249, 0xf9}], 0x2}, 0x0) 06:46:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:46:47 executing program 2: syz_io_uring_setup(0x71bf, &(0x7f00000001c0)={0x0, 0x0, 0x23}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 06:46:47 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@random={'trusted.', 'tmpfs\x00'}) 06:46:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x1000}, {0x0}, {&(0x7f0000001100)="c7a1", 0x2}], 0x3, &(0x7f0000001240)=[{0x10}], 0x10}}], 0x1, 0x48045) 06:46:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB=',defcontext=', @ANYBLOB=',context=']) 06:46:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r2) 06:46:47 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:46:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "7822ed1e7111e9a081a267f2f1017ae6fd6f84f7bacec1012c154f772fa65402000000604a31d67f20c2e90100d4953f3a8da2a2c7505cb006a2e0135bc7a33e15719c12ee92879652e98fd5c67abfb9"}, 0xd8) 06:46:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fff00102e80a423c7", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 06:46:47 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x22]}}}}]}) 06:46:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/253, 0xfd}, {&(0x7f00000001c0)=""/178, 0xb2}], 0x2, 0x0, 0x0) [ 246.602992][ T6393] overlayfs: conflicting lowerdir path [ 246.610272][ T6400] tmpfs: Bad value for 'mpol' 06:46:48 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:48 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x40) [ 246.805811][ T6402] __nla_validate_parse: 8 callbacks suppressed [ 246.805863][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:48 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:46:48 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 06:46:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fff00102e80a423c7", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 06:46:48 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 06:46:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005200472b1ce288f9002304000204f51110000100020000000804000000000000", 0x24) [ 247.540126][ T6415] tmpfs: Unknown parameter 'fscontext' 06:46:49 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 247.884221][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:46:49 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'user.', '6\x00'}) 06:46:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0xb, 0x0, 0x0) 06:46:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0xb0, 0x218, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 06:46:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 06:46:49 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) close(r0) 06:46:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f00000000c0)=@ethernet={0x0, @link_local}, 0x80) 06:46:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:46:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006900)=[{{&(0x7f0000000040)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, &(0x7f0000001240)=[{0x10}], 0x10}}], 0x1, 0x48045) 06:46:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x13, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="26f672", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 06:46:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@generic={0x0, "c7c09bfa41f2a223784d8fd8edae7d0dc52ae0637427af27a42cabbcdefdc521a286e9b65819acc8e4660cf3eb3951660c28933640a99ac8e50bb5c51b934033a231f9bff42babbfac794be46ddf81b66e992930bbc4b077bb386e837d8cb7ac587d6b1d1af4cbb2493824a9e28d903850d6b22d3be7f31911081c6b4d3f"}, 0x80) 06:46:50 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6d6d02, 0x0) 06:46:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000003200), &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB="c802d2b1c56d6082ea22"]) 06:46:50 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind(r0, 0x0, 0x0) 06:46:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty}, 0xc) 06:46:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) 06:46:50 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 06:46:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, 0x0, 0x0) [ 248.803247][ T6455] tmpfs: Unknown parameter 'ÈÒ±Åm`‚ê"' 06:46:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB=',defcontext=s', @ANYBLOB=',context=']) 06:46:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x76, 0x0, 0x0) 06:46:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x41, 0x0, 0x0) 06:46:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='context=']) 06:46:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x12, 0x0, 0x0) 06:46:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2c, 0x22]}}}}]}) 06:46:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x9, 0x0, 0x0) 06:46:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) [ 249.063634][ T6478] tmpfs: Unknown parameter 'context' [ 249.064349][ T6480] tmpfs: Bad value for 'mpol' 06:46:51 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002840)={0x0, [], 0x81, "3a55b9c0f3ce3e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000007, 0x4010, r2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x4c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x4c}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000004c0), 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 06:46:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 06:46:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, 0x0, 0x0) 06:46:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "2701010000005402a01ab1135c2b1ac5"}, 0x11, 0x0) 06:46:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001100)="c7a1", 0x2}], 0x1, &(0x7f0000001240)=[{0x10}], 0x10}}], 0x1, 0x48045) 06:46:51 executing program 1: syz_io_uring_setup(0x4521, &(0x7f0000000000)={0x0, 0x200000, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000700)) 06:46:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 06:46:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)='\n', 0x1}], 0x1}, 0x0) 06:46:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:51 executing program 0: semget(0x1, 0x3, 0x24c) 06:46:51 executing program 1: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 06:46:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 06:46:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002900)={'ip_vti0\x00', &(0x7f0000002840)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}) 06:46:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000003400)='./file0\x00', 0x0, 0x0, 0x0) 06:46:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000003dc0), 0x2, 0x0) 06:46:51 executing program 5: semget(0x3, 0x3, 0x320) 06:46:51 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:51 executing program 0: semget$private(0x0, 0x3, 0x8) 06:46:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 06:46:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) 06:46:51 executing program 3: semget$private(0x0, 0x3, 0x219) 06:46:51 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 5: semget$private(0x0, 0x4, 0x42) 06:46:51 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 06:46:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:51 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x5) 06:46:51 executing program 1: semget(0x3, 0x0, 0x320) 06:46:51 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 06:46:51 executing program 0: semget$private(0x0, 0x3, 0x1d0) 06:46:51 executing program 1: timer_create(0x0, &(0x7f0000002040), 0x0) 06:46:51 executing program 5: semget$private(0x0, 0x0, 0x2e8) r0 = semget(0x1, 0x4, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 06:46:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5450, 0x0) 06:46:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:51 executing program 0: memfd_create(&(0x7f0000001380)='/dev/net/tun\x00', 0x2) 06:46:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:51 executing program 3: semget$private(0x0, 0x3, 0x206) 06:46:51 executing program 1: timer_create(0x7, &(0x7f0000002040)={0x0, 0x0, 0x1}, &(0x7f0000002080)) 06:46:52 executing program 5: semget$private(0x0, 0x0, 0x2e8) r0 = semget(0x1, 0x4, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:52 executing program 0: semget$private(0x0, 0x1, 0xe5) 06:46:52 executing program 5: semget$private(0x0, 0x0, 0x2e8) r0 = semget(0x1, 0x4, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 1: semget$private(0x0, 0x2, 0x20) 06:46:52 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_gettime(r0, 0x0) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]}) 06:46:52 executing program 3: semget$private(0x0, 0x2, 0x10) 06:46:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x410001, 0x0) 06:46:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:52 executing program 5: semget$private(0x0, 0x0, 0x2e8) r0 = semget(0x1, 0x4, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {}]}, 0x10) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockname$netlink(r0, 0x0, 0x0) 06:46:52 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 06:46:52 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 06:46:52 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 1: semget$private(0x0, 0x2, 0x1) 06:46:52 executing program 0: semget(0x0, 0x0, 0x89) 06:46:52 executing program 5: msgget$private(0x0, 0x44c) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:46:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 06:46:52 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x20) 06:46:52 executing program 0: semget(0x1, 0x0, 0x63c) 06:46:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:52 executing program 5: pipe2(&(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) 06:46:52 executing program 3: semget$private(0x0, 0x1, 0x8) 06:46:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 06:46:52 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 06:46:52 executing program 5: pipe2(&(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) 06:46:52 executing program 3: semget$private(0x0, 0x7, 0x3d) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 06:46:52 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 06:46:52 executing program 5: pipe2(&(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) 06:46:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 06:46:52 executing program 3: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/26) 06:46:52 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 06:46:52 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 06:46:53 executing program 5: pipe2(&(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) 06:46:53 executing program 0: pipe2(&(0x7f0000004100)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) 06:46:53 executing program 3: pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={0x0}) 06:46:53 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/255) 06:46:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:53 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 06:46:53 executing program 5: msgget$private(0x0, 0x100) 06:46:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) 06:46:53 executing program 1: semget$private(0x0, 0x3, 0x244) 06:46:53 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 06:46:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 06:46:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000003080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r1, &(0x7f00000050c0)) 06:46:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:46:53 executing program 3: mq_open(&(0x7f0000000200)='!\'!\x00\x7ft\xd4\f8\xee\xdc\x8d\x8cv\xb5a\xfc\xa1\xbc]\xbd\xbdxK\x02-\x86\xe4\xee8\x86\xb5\x0f\xd1\xa9\x9ey\xc7\xe2\xff\x10\xfdw/\xd8jMH\xb1\xfd\xa2k\xe7\xd5\xcdb;\xfd\x9d1\x92\x03\x889\xc3\xd74\xe45w\xb1\xa6\xa1\t\xbe\x88\x98\x86\xc5C\xc4\x9a\x8f\xb9\x7f\xd3\xea\x16\xafZ\xedX2\nq\x00\x00\x00\x00\x00\x00\x00\x003Q\x13s\x14\xcb\xf8H\xea\x8e\a\xe8\xdd\x90\xae\xa5Q\xcf\xcd\xc9:kA\x97\xf2;w8\xb3z7\x00\x83\xdd]\xf1\xb0N\xbd \xc0\xc7\xc3\xf6\xab\x8b\x88\xd7\x1b\xedDU`\x90\xea\xbb^\xfe\xe3d/\x96xq\x97\xc2\f]6q\x85\xb6\x0f\xf5\x90=\xa5\x8d;bz\xc8\x90\xfe&\x8d\xdd\x1a\xa28J\xa4|\xfa\xa0\xe8f\xc6C\xafJ\rR\xfd\xbb\xe0\x84\x98\xd7\xfdvwsV\xdb\xba)\xb9\xb4c(P\x8f\x1e?`\x9ac\xce\x99\x19\x11kN\x1e\xf7\xeb\xd2&h\x02\x00\xb9\x84U\xfc\x04c\xd6\x92\xf3\xa56=\xc3m>\xa6c\xbb\x856\xbd\xc3)~\x12MB\x90aL4&<\xd10\xfe\x9f+\xbb|\xe5)\xd4yOoW:\x97u\xae\xce\xc6}\xed\xcb|Dv\xf9\x8d\x98\x9e\xfd\x01\x10d\xd3\x00', 0x80, 0x0, 0x0) [ 251.913207][ T6684] tmpfs: Bad value for 'mpol' 06:46:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) 06:46:53 executing program 5: mq_open(&(0x7f0000000180)='!\'!\x00\x7ft\xd4\f8\xee\xdc\x8d\x8cv\xb5a\xfc\xa1\xbc]\xbd\xbdxK\x02-\x86\xe4\xee8\x86\xb5\x0f\xd1\xa9\x9ey\xc7\xe2\xdf\x10\xfdw/\xd8jMH\xb1\xfd\xa2k\xe7\xd5\xcdb;\xfd\x9d1\x92\x03\x889\xc3\xd74\xe45w\xb1\xa6\xa1\t\xbe\x88v\x86\xc5C\xc4\x9a\x8f\xb9\x7f\xd3\xea\x16\xafZ\xedX2\nq\x00\x00\x00\x00\x00\x00\x00\x003Q\x13s\x14\xcb\xf8H\xea\x8e\a\xe8\xdd\x90\xae\xa5Q\xcf\xcd\xc98kA\x97\xf2;w8\xb3z7\x00\x83\xdd]\xf1\xb0N\xbd \xc0\xc7\xc3\xf6\xab\x8b\x88\xd7\x1b\xedDU`\x90\xea\xbb^\xfe\xe3d/\x96xq\x97\xc2\f]6q\x85\xb6\x0f\xf5\x90=\xa5\x8d;bz\xc8\x90\xfe&\x8d\xdd\x1a\xa28J\xa4|\xfa\xa0\xe8f\xc6C\xafJ\rR\xfd\xbb\xe0\x84\x98\xd7\xfdvwsV\xdb\xba)\xb9\xb4c(P\x8f\x1e_`\x9ac\xce\x99\x19\x11kN\x1e\xf7\xeb\xd2&h\x02\x00\xb9\x84U\xfc\x04c\xd6\x92\xf3\xa56=\xc3m>\xa6c\xbb\x856\xbd\xc3)~\x12MB\x90aL4&<\xd10\xfe\x9f+\xbb|\xe5)\xd4yOoW:\x97u\xae\xce\xc6}\xed\xcb|Dv\xf9\x8d\x98\x9e\xfd\x01\x10d\xd3\x00', 0x2, 0x180, &(0x7f0000000000)) 06:46:53 executing program 0: mq_open(&(0x7f0000000200)='!\'!\x00\x7ft\xd4\f8\xee\xdc\x8d\x8cv\xb5a\xfc\xa1\xbc]\xbd\xbdxK\x02-\x86\xe4\xee8\x86\xb5\x0f\xd1\xa9\x9ey\xc7\xe2\xff\x10\xfdw/\xd8jMH\xb1\xfd\xa2k\xe7\xd5\xcdb;\xfd\x9d1\x92\x03\x889\xc3\xd74\xe45w\xb1\xa6\xa1\t\xbe\x88\x98\x86\xc5C\xc4\x9a\x8f\xb9\x7f\xd3\xea\x16\xafZ\xedX2\nq\x00\x00\x00\x00\x00\x00\x00\x003Q\x13s\x14\xcb\xf8H\xea\x8e\a\xe8\xdd\x90\xae\xa5Q\xcf\xcd\xc9:kA\x97\xf2;w8\xb3z7\x00\x83\xdd]\xf1\xb0N\xbd \xc0\xc7\xc3\xf6\xab\x8b\x88\xd7\x1b\xedDU`\x90\xea\xbb^\xfe\xe3d/\x96xq\x97\xc2\f]6q\x85\xb6\x0f\xf5\x90=\xa5\x8d;bz\xc8\x90\xfe&\x8d\xdd\x1a\xa28J\xa4|\xfa\xa0\xe8f\xc6C\xafJ\rR\xfd\xbb\xe0\x84\x98\xd7\xfdvwsV\xdb\xba)\xb9\xb4c(P\x8f\x1e?`\x9ac\xce\x99\x19\x11kN\x1e\xf7\xeb\xd2&h\x02\x00\xb9\x84U\xfc\x04c\xd6\x92\xf3\xa56=\xc3m>\xa6c\xbb\x856\xbd\xc3)~\x12MB\x90aL4&<\xd10\xfe\x9f+\xbb|\xe5)\xd4yOoW:\x97u\xae\xce\xc6}\xed\xcb|Dv\xf9\x8d\x98\x9e\xfd\x01\x10d\xd3\x00', 0x80, 0x0, &(0x7f0000000000)) 06:46:53 executing program 1: shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) 06:46:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f0000000680)={'ip6_vti0\x00', 0x0}) [ 252.070934][ T6695] tmpfs: Bad value for 'mpol' 06:46:53 executing program 0: semget$private(0x0, 0x2, 0x440) 06:46:53 executing program 5: syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x104200) 06:46:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) 06:46:53 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0xac1, 0x0) 06:46:53 executing program 3: syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x200000) 06:46:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:46:53 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xc1, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) [ 252.217005][ T6712] tmpfs: Bad value for 'mpol' 06:46:53 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xd0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x33}}]}}]}}, 0x0) 06:46:53 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 06:46:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000001180)) 06:46:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x0]}}}}]}) 06:46:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x0]}}}}]}) [ 252.354405][ T6726] tmpfs: Bad value for 'mpol' 06:46:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:46:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) [ 252.439210][ T6730] tmpfs: Bad value for 'mpol' 06:46:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x8, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 06:46:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x0]}}}}]}) 06:46:53 executing program 3: syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x20640) 06:46:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) [ 252.587407][ T3676] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 252.595108][ T3602] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 252.599881][ T6736] tmpfs: Bad value for 'mpol' [ 252.637545][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 252.847632][ T3676] usb 1-1: Using ep0 maxpacket: 16 [ 252.852895][ T3602] usb 6-1: Using ep0 maxpacket: 16 [ 252.877422][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 252.968655][ T3676] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 252.981489][ T3676] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 252.992524][ T3676] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.017638][ T3602] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.027740][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.062829][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.098029][ T3602] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 253.129307][ T3602] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 253.152412][ T3602] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.218185][ T3676] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.241439][ T3676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.278037][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 253.280526][ T3676] usb 1-1: Product: syz [ 253.287091][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.287116][ T7] usb 2-1: Product: syz [ 253.287131][ T7] usb 2-1: Manufacturer: syz [ 253.287162][ T7] usb 2-1: SerialNumber: syz [ 253.375355][ T3676] usb 1-1: Manufacturer: syz [ 253.401900][ T3676] usb 1-1: SerialNumber: syz [ 253.427974][ T3602] usb 6-1: string descriptor 0 read error: -22 [ 253.434317][ T3602] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.444083][ T3602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.600170][ T7] usb 2-1: USB disconnect, device number 2 [ 253.728035][ T3676] usb 1-1: 0:2 : does not exist [ 253.750052][ T3602] usb 6-1: 0:2 : does not exist [ 253.765034][ T3676] usb 1-1: USB disconnect, device number 5 [ 253.779593][ T3602] usb 6-1: USB disconnect, device number 5 06:46:55 executing program 0: syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x201) 06:46:55 executing program 2: syz_open_dev$evdev(&(0x7f0000001480), 0xffffffff, 0x0) 06:46:55 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 06:46:55 executing program 3: syz_open_dev$evdev(&(0x7f0000001140), 0x8, 0x0) 06:46:55 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x6, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000580)=@string={0x4, 0x3, ';)'}}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}]}) 06:46:55 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:46:55 executing program 1: syz_open_dev$hidraw(&(0x7f0000000880), 0x0, 0x210040) 06:46:55 executing program 0: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) syz_open_dev$evdev(&(0x7f0000001140), 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000001480), 0xffffffff, 0x0) 06:46:55 executing program 3: syz_open_dev$evdev(&(0x7f0000001140), 0x8, 0x20640) 06:46:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 06:46:55 executing program 0: syz_mount_image$fuse(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000042c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="3d3030303030303030303030302030303030313430304a302c75736572016964"]) [ 254.328733][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 254.328748][ T25] audit: type=1804 audit(1640155615.691:53): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir680554365/syzkaller.5dMBFk/217/bus/file0" dev="sda1" ino=1186 res=1 errno=0 06:46:55 executing program 3: prctl$PR_SET_CHILD_SUBREAPER(0xd, 0x0) 06:46:55 executing program 1: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 06:46:55 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 254.464790][ T6764] fuse: Unknown parameter '0xffffffffffffffff' [ 254.617595][ T3688] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.657531][ T3676] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 254.897400][ T3676] usb 3-1: Using ep0 maxpacket: 16 [ 254.907505][ T3688] usb 6-1: Using ep0 maxpacket: 16 [ 255.057698][ T3676] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.087537][ T3688] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.138097][ T3676] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 255.146795][ T3676] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 255.156956][ T3676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.167519][ T3688] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.327497][ T3676] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.337026][ T3676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.345407][ T3676] usb 3-1: SerialNumber: syz [ 255.347647][ T3688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.361686][ T3688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.369789][ T3688] usb 6-1: Product: syz [ 255.374038][ T3688] usb 6-1: Manufacturer: syz [ 255.378675][ T3688] usb 6-1: SerialNumber: syz [ 255.450574][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.456943][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.623657][ T921] usb 6-1: USB disconnect, device number 6 [ 255.697903][ T3676] usb 3-1: 0:2 : does not exist [ 255.728191][ T3676] usb 3-1: USB disconnect, device number 2 [ 255.752952][ T3828] udevd[3828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 06:46:57 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 06:46:57 executing program 3: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) 06:46:57 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) io_setup(0x1000, &(0x7f0000000480)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x2, &(0x7f0000009080)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:46:57 executing program 1: io_uring_setup(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:57 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:46:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@block={'block', 0x3d, 0x800}}]}) [ 256.181549][ T6778] fuse: Bad value for 'fd' 06:46:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 06:46:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x3ff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f0000000140)="d8", 0x1, 0x0, 0x0, 0x0) 06:46:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000140)={@multicast1}, 0xc) 06:46:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x18, &(0x7f0000001700)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 06:46:57 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:46:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x41, 0x4) 06:46:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) 06:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) [ 256.367811][ T6780] ISOFS: Unable to identify CD-ROM format. 06:46:57 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) write$FUSE_INIT(r0, 0xfffffffffffffffc, 0x0) 06:46:57 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:46:57 executing program 2: io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 06:46:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(r0, 0x0, 0x0) 06:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x6f, 0x4) 06:46:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 06:46:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000700)) 06:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) 06:46:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) 06:46:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0xa, 0x4) 06:46:58 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:46:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0), 0x4) 06:46:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0xfffffffe, 0x4) 06:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0), 0x26) 06:46:58 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000004500), &(0x7f0000004540), &(0x7f0000004580)={0x0, "4694f1528ffc9a44f27905688b3e8db86879edac34cc6f5c7c83cecff078dd7fc2adb14c832d9adc7eb163f143357fad5e01ec936af7180aca5bc0b3d6a188d1"}, 0x48, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 06:46:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f00000002c0), 0x4) 06:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0), 0x4) 06:46:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000100)=""/231, &(0x7f0000000000)=0xe7) 06:46:58 executing program 4: readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=""/19, 0x13) 06:46:58 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) 06:46:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 06:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0xfffff892, 0x4) 06:46:58 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000004500), &(0x7f0000004540), &(0x7f0000004580)={0x0, "4694f1528ffc9a44f27905688b3e8db86879edac34cc6f5c7c83cecff078dd7fc2adb14c832d9adc7eb163f143357fad5e01ec936af7180aca5bc0b3d6a188d1"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000004840), 0x0, 0x0, 0x0, r0) 06:46:58 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/fs/cgroup', 0x16000, 0x0) 06:46:58 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x81, 0x0) 06:46:58 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r0, 0x0, 0x22) 06:46:58 executing program 5: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0xfffffffffffffec0) 06:46:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0xffffffffffffffc0) 06:46:58 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0xff40, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 06:46:58 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) 06:46:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) 06:46:58 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000004500), &(0x7f0000004540), &(0x7f0000004580)={0x0, "4694f1528ffc9a44f27905688b3e8db86879edac34cc6f5c7c83cecff078dd7fc2adb14c832d9adc7eb143f143357fad5e01ec936af7180aca5bc0b3d6a188d1"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, 0x0, 0x0) 06:46:58 executing program 2: capget(&(0x7f00000003c0)={0x19980330}, 0xfffffffffffffffe) 06:46:58 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/pm_test', 0x42001, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000021c0)=ANY=[], 0x29) 06:46:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 06:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0), 0x4) 06:46:58 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/pm_trace_dev_match', 0x42001, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000021c0)={0x29}, 0x29) 06:46:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0}}], 0x1, 0x20000001) [ 257.240019][ T6864] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 06:46:58 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop3', 0x220000, 0x0) 06:46:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0xdda) 06:46:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0xfc, 0x4) 06:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xe, &(0x7f00000000c0), 0x4) 06:46:58 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) pselect6(0x7d, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 06:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0x4) 06:46:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x800, 0x4) 06:46:58 executing program 0: r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x0) 06:46:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) read$FUSE(r0, 0x0, 0x0) 06:46:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 06:46:58 executing program 1: r0 = socket(0x10, 0x2, 0x4) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:46:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x1, 0x4) 06:46:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2, 0x4) 06:46:58 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/pm_test', 0x42001, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) 06:46:58 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 06:46:58 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_test', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:46:58 executing program 2: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000100)='>=', 0xe, 0xfffffffffffffffb) 06:46:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x8, 0x4) 06:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x1929c855, 0x4) 06:46:59 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0xffffffffffffffff, 0x0) 06:46:59 executing program 5: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000100)='>=', 0x2, 0xfffffffffffffffb) 06:46:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 06:46:59 executing program 1: r0 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 06:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xe, &(0x7f00000000c0), 0xfed9) 06:46:59 executing program 4: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "1cd0c6160d77577ecaedd37ff3c272ad4c8c28fa93c12788bf5f524b77c4fd8ff05e58b13836a9eb12c8c9427eb0c6d07c40e7cee5eed9b6abb8675200e84a38"}, 0x48, 0xfffffffffffffffb) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nf_conntrack_tftp', 0x0, 0x0) 06:46:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20044014, &(0x7f0000001100)=@rc={0x1f, @none}, 0x80) 06:46:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x9, 0x4) 06:46:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040)={0x3}, 0x0, 0x0) 06:46:59 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000006680)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, 0x0}}], 0x1, 0x0) 06:46:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) 06:46:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='\b', 0x1, r0) 06:46:59 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:46:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x8, r1, 0x0, 0x1, 0x4}}, 0x20) 06:46:59 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000100)}]) 06:46:59 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:46:59 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_port', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 06:46:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000380)=""/229, 0x26, 0xe5, 0x1}, 0x20) 06:46:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x40101283, 0x0) 06:46:59 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'ip6erspan0\x00'}}, 0x1e) 06:46:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x80000000}]) 06:46:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb0100180000000005"], &(0x7f0000000200)=""/201, 0x98, 0xc9, 0x1}, 0x20) 06:46:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x5450, 0x0) 06:46:59 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 06:46:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8}, 0x10) 06:46:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000040000000b00000001000006040000000f00000005000000010000000000000205000000070000000000000c010000000a000000000000090100000000000400000700001d0000000007000000040000000c000000020000000f00000003000000060000000100000004000000000000000e000000000000001000000001578b9a"], &(0x7f0000000200)=""/201, 0x98, 0xc9, 0x1}, 0x20) 06:46:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 06:46:59 executing program 5: io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) 06:46:59 executing program 4: add_key(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 06:46:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x48) 06:46:59 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 06:46:59 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000001540), 0x6000, 0x0) 06:46:59 executing program 0: bpf$MAP_CREATE(0x8, 0x0, 0x0) 06:46:59 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 06:46:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='('], 0x33fe0}}, 0x0) 06:46:59 executing program 5: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="85", 0x1, 0xfffffffffffffffc) 06:46:59 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000011c0)={&(0x7f0000000f80), 0xfcc3, &(0x7f0000001180)={&(0x7f0000001040)=ANY=[@ANYBLOB="9a620d34afd2ac0415b5278e9429b4b6ea82d8dda6b760105c3b4dae4d0b51965485beca7c77dee0cb98b9c5919d4ffcfcc1d423de73730b742725a09ed796a43656da9eaeda9165478b2b311deef8540000000000000000"], 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x240480d5) 06:46:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 06:46:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x127c, &(0x7f00000000c0)) 06:46:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1278, &(0x7f00000000c0)) 06:46:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x3, 0x0, r0, 0x0}]) 06:46:59 executing program 5: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="85", 0x1, 0xfffffffffffffffc) 06:46:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000002c0)=""/227, 0xcb, 0xe3, 0x1}, 0x20) 06:46:59 executing program 0: io_setup(0x4c00f, &(0x7f0000000000)) 06:47:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'J'}]}}, &(0x7f00000000c0)=""/248, 0x2a, 0xf8, 0x1}, 0x20) 06:47:00 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:47:00 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) 06:47:00 executing program 5: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="85", 0x1, 0xfffffffffffffffc) 06:47:00 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x127e, &(0x7f00000000c0)) 06:47:00 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) 06:47:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x401870cc, 0x0) 06:47:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x5452, 0x0) 06:47:00 executing program 0: pipe(&(0x7f0000002340)={0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000005, 0x13, r0, 0x0) 06:47:00 executing program 2: add_key(&(0x7f00000000c0)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 06:47:00 executing program 5: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="85", 0x1, 0xfffffffffffffffc) 06:47:00 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/5, 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) dup2(r0, r3) sendmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000001c0)=@generic={0x0, "340f4228031f8a60bbcd183e5631c680bb8568567aa63602d0adb9cf1d99ab600ebb36e9cf6e975f4808edb0f151812081796fe52bbd7d7a69ae819ef6151d1db19ed5bc2ae5257c0e6f4b6cda2c2adb1d50b5b67f25c10e96c08239d8d979808c4f4e8a1e079a3476aa6c120727134354b32b9b77fc9085961481985e36"}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x2, 0x2404004b) 06:47:00 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 06:47:00 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 06:47:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const, @volatile]}}, &(0x7f0000000380)=""/229, 0x32, 0xe5, 0x1}, 0x20) 06:47:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x10b002) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8}, 0x10) 06:47:00 executing program 1: bpf$MAP_CREATE(0xe, 0x0, 0x0) 06:47:00 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/5, 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) dup2(r0, r3) sendmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000001c0)=@generic={0x0, "340f4228031f8a60bbcd183e5631c680bb8568567aa63602d0adb9cf1d99ab600ebb36e9cf6e975f4808edb0f151812081796fe52bbd7d7a69ae819ef6151d1db19ed5bc2ae5257c0e6f4b6cda2c2adb1d50b5b67f25c10e96c08239d8d979808c4f4e8a1e079a3476aa6c120727134354b32b9b77fc9085961481985e36"}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x2, 0x2404004b) 06:47:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES64], 0x14}}, 0x0) 06:47:00 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x80081272, &(0x7f00000000c0)) 06:47:00 executing program 0: io_setup(0x1, &(0x7f0000000680)=0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7fffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, 0x0}]) 06:47:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000014c0)={0x16, 0x98, 0xfa00, {0x0}}, 0xa0) 06:47:00 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000cae3d9c752ff9e64a0336753b4eebb77e00100000000000001a4d938e545f5b9aa56154"], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) 06:47:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x4020940d, &(0x7f00000000c0)) 06:47:00 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/5, 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) dup2(r0, r3) sendmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000001c0)=@generic={0x0, "340f4228031f8a60bbcd183e5631c680bb8568567aa63602d0adb9cf1d99ab600ebb36e9cf6e975f4808edb0f151812081796fe52bbd7d7a69ae819ef6151d1db19ed5bc2ae5257c0e6f4b6cda2c2adb1d50b5b67f25c10e96c08239d8d979808c4f4e8a1e079a3476aa6c120727134354b32b9b77fc9085961481985e36"}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x2, 0x2404004b) 06:47:00 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 06:47:00 executing program 1: bpf$MAP_CREATE(0x6, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:47:00 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x1, @random="447f4457c1dc"}}, 0x1e) [ 259.232996][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:00 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdfe, 0x0, 0x0, r0, 0x0}]) 06:47:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10021, 0x0, 0x0) 06:47:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 06:47:00 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 06:47:00 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/5, 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) dup2(r0, r3) sendmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000001c0)=@generic={0x0, "340f4228031f8a60bbcd183e5631c680bb8568567aa63602d0adb9cf1d99ab600ebb36e9cf6e975f4808edb0f151812081796fe52bbd7d7a69ae819ef6151d1db19ed5bc2ae5257c0e6f4b6cda2c2adb1d50b5b67f25c10e96c08239d8d979808c4f4e8a1e079a3476aa6c120727134354b32b9b77fc9085961481985e36"}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x2, 0x2404004b) 06:47:00 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc0481273, 0x0) 06:47:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)) [ 259.437855][ T7067] ucma_write: process 559 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. 06:47:00 executing program 5: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='encrypted\x00', 0xfffffffffffffffc) 06:47:00 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:47:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb01001800000068"], &(0x7f0000000200)=""/201, 0x98, 0xc9, 0x1}, 0x20) 06:47:00 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x125e, &(0x7f00000000c0)) 06:47:00 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 06:47:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) 06:47:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x48) 06:47:01 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, r0, 0x0}]) 06:47:01 executing program 4: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000300)={&(0x7f0000001340)=ANY=[], 0x0, 0x98}, 0x20) 06:47:01 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:47:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x10, 0x0, @in={0x2, 0x0, @local}}}, 0xa0) 06:47:01 executing program 0: bpf$BPF_BTF_LOAD(0xa, 0x0, 0x0) 06:47:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x127a, &(0x7f00000000c0)) 06:47:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x5421, &(0x7f00000000c0)) 06:47:01 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) 06:47:01 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'J'}]}}, &(0x7f00000000c0)=""/248, 0x2a, 0xf8, 0x1}, 0x20) 06:47:01 executing program 3: bpf$MAP_CREATE(0x4, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:47:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000000380)=""/229, 0x26, 0xe5, 0x1}, 0x20) 06:47:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc0189436, 0x0) 06:47:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) 06:47:01 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc0045878, 0x0) 06:47:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x4, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:47:01 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) 06:47:01 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1279, &(0x7f00000000c0)) 06:47:01 executing program 3: add_key(&(0x7f00000000c0)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 06:47:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:47:01 executing program 1: add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000300)="006cf3e8c46c34ddd30c3a0a3caa5240ca551b3432c9e72ab2596e52a6fe66b0", 0x20, 0xfffffffffffffffb) 06:47:01 executing program 3: bpf$BPF_BTF_LOAD(0x2, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 06:47:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003"], 0x28}}, 0x0) 06:47:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1269, &(0x7f00000000c0)) 06:47:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x401070cd, 0x0) 06:47:01 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x81, 0x0, 0xb3, 0x7, @multicast}, 0x10) 06:47:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, 0x0}]) 06:47:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x8000000000000000}]) 06:47:01 executing program 2: add_key(&(0x7f0000000240)='ceph\x00', 0x0, &(0x7f00000002c0)='z', 0x1, 0xfffffffffffffffd) 06:47:01 executing program 1: bpf$MAP_CREATE(0xc, 0x0, 0x0) 06:47:01 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) [ 260.218744][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 06:47:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x5451, 0x0) 06:47:01 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 06:47:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x10e, 0x1, 0x0, 0x0) 06:47:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc020660b, 0x0) 06:47:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 06:47:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 06:47:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 06:47:01 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:47:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x88, 0x801) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10) 06:47:01 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) 06:47:01 executing program 3: getrusage(0x4a96ffa527f7248c, 0x0) 06:47:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x1, 0x10, r0, 0x0) 06:47:01 executing program 1: socket(0x10, 0x80003, 0x1) 06:47:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x401870c8, 0x0) 06:47:02 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1274, 0x0) 06:47:02 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r0) 06:47:02 executing program 0: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='syz', 0xfffffffffffffffd) 06:47:02 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) 06:47:02 executing program 1: bpf$MAP_CREATE(0x11, 0x0, 0x0) 06:47:02 executing program 4: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001300)={{r1}, 0x0, 0x20, @unused=[0x101, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc], @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 06:47:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009"], 0x28}}, 0x0) 06:47:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000cae"], 0x28}}, 0x0) 06:47:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 06:47:02 executing program 1: io_setup(0x1, &(0x7f0000000680)) io_setup(0x40, &(0x7f0000000000)=0x0) io_destroy(r0) 06:47:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2}}, 0x10) 06:47:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x10, 0x0, 0x0, 0x6c2}, 0x48) 06:47:02 executing program 5: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0xfffffffffffffed4) 06:47:02 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='[%\x00') 06:47:02 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0xe0}, 0x0, 0x0) 06:47:02 executing program 3: bpf$BPF_BTF_LOAD(0x2, 0x0, 0x0) 06:47:02 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) 06:47:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000014c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}}, 0xffffffffffffff67) [ 261.596050][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:03 executing program 2: add_key(&(0x7f0000000140)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 06:47:03 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0}]) 06:47:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xe, 0x0, 0x0, 0x1000}, 0x48) 06:47:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 06:47:03 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @empty}}, 0x24) 06:47:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) 06:47:03 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2}]) 06:47:03 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x2c480, 0x0) [ 261.970266][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:47:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x5452, &(0x7f00000000c0)) 06:47:03 executing program 3: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) 06:47:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) 06:47:03 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0xc0189436, &(0x7f00000000c0)) 06:47:03 executing program 1: bpf$MAP_CREATE(0x6, 0x0, 0x0) 06:47:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 06:47:03 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0xfffffffffffffdb6) 06:47:03 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 06:47:03 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000001280), &(0x7f0000001440)=""/4096, 0x1000, &(0x7f0000001340)={0x0}) 06:47:03 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1276, 0x0) 06:47:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0xff92) 06:47:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname(r0, 0x0, &(0x7f0000000180)) 06:47:04 executing program 1: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x6) 06:47:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) [ 262.647513][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 262.647562][ T3602] Bluetooth: hci5: command 0x0406 tx timeout 06:47:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f00000002c0)) 06:47:04 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) [ 262.692859][ T3602] Bluetooth: hci0: command 0x0406 tx timeout 06:47:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) 06:47:04 executing program 2: memfd_create(&(0x7f0000000000)='.-', 0x0) 06:47:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040), 0x10) 06:47:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) 06:47:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) [ 262.735933][ T3602] Bluetooth: hci3: command 0x0406 tx timeout [ 262.760823][ T3602] Bluetooth: hci2: command 0x0406 tx timeout 06:47:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) 06:47:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @loopback}}) 06:47:04 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:04 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/power_supply', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 06:47:04 executing program 1: pipe(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 06:47:04 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 06:47:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 06:47:04 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 06:47:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4008400) 06:47:04 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80}) 06:47:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) 06:47:04 executing program 2: ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) 06:47:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:47:04 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 06:47:04 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x410000, 0x0) 06:47:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 06:47:04 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 06:47:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) 06:47:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f0000000080)=@qipcrtr, 0x80) 06:47:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000180)) 06:47:04 executing program 0: setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 06:47:04 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/devices/system', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 06:47:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r0, 0x0, 0x0) 06:47:04 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 06:47:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 06:47:04 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) 06:47:04 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x240701, 0x1) 06:47:04 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 06:47:04 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) bind(r0, 0x0, 0x0) 06:47:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 06:47:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 06:47:04 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/devices/system', 0x0, 0x0) timerfd_gettime(r0, 0x0) 06:47:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 06:47:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 06:47:04 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 06:47:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 06:47:04 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 06:47:05 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001900)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001700)=[{&(0x7f0000000200)="ba832f5ab20953928c1d8b1dfa4f4c3b91547c14f4bf489ca941f5920c9ad33b37c16fe3eabdc4e9f73e33ee14d52534b12d897dbbecb5d38ea95e8136687d69ec752b8e012203074a26f0984dcd745f38a3ca5d01c8a8ac5b6037cd835f1a45ff93f57ac9b160330f723db81b2d09bb4fb3e916e52a68f4fe71987386de1d44", 0x80}, {&(0x7f0000000280)="9a63a4a1a68619e5a43cf4a8306767a83267a73f472556110573eeb9c2b9deb20cb847a8e6ff73d80fce5362029a5f7fa6669058d597263dbffb5c0d302c9daa61ede6eaaa81", 0x46}, {&(0x7f0000000300)="0e0a648cebb4421cdd76a42bcd644b92528cc6f2356ee2e0aee70fe2862ad4349067bbb7c6af54137a304396c7554d1bcca7d3f0cd978f0ca147de2c40f47832e33c00b9573808a3da80f954b8a04ecab3dd72f0e73dcfdc6bbf342b120cecb00527ae7400a4d1b0e7bee4d10d3c1c9fa4438e9b914bd614b221e8d2c8ce575f20937fc640c1ce", 0x87}, {&(0x7f00000003c0)="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", 0x6b4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001840)=[@rights], 0x10}, 0x0) 06:47:05 executing program 0: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) rename(&(0x7f0000000080)='./file0\x00', 0x0) 06:47:05 executing program 4: syz_emit_ethernet(0x16, &(0x7f0000000000)={@random="2e31d9ed88fa", @broadcast}, 0x0) 06:47:05 executing program 3: socket$inet(0x2, 0x0, 0x7) 06:47:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)) 06:47:05 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) setrlimit(0x0, &(0x7f00000000c0)) 06:47:05 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 06:47:05 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/79) 06:47:05 executing program 5: fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:47:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x0, 0x0) 06:47:05 executing program 1: sendto$inet6(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0) 06:47:05 executing program 5: poll(0x0, 0x0, 0x8001) 06:47:05 executing program 4: socket(0x10, 0x0, 0x81) 06:47:05 executing program 0: clock_getres(0x0, &(0x7f0000000280)) 06:47:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x302, 0x0) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) 06:47:05 executing program 3: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/64, 0x40) 06:47:05 executing program 1: accept(0xffffffffffffff9c, &(0x7f00000010c0)=@in, 0x0) 06:47:05 executing program 0: pipe2(0x0, 0xa) 06:47:05 executing program 4: mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 06:47:05 executing program 1: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 06:47:05 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x2, &(0x7f0000000000)) 06:47:06 executing program 4: socket(0x1, 0x0, 0x6) 06:47:06 executing program 2: syz_emit_ethernet(0x4f, &(0x7f0000000000)={@empty, @random="2fa69e2fba58", @val, {@generic={0x0, "6edf50c117125bc0f639d4209c85dfe8a893d5235301250e826772d1ae885908c0fd305dc76530c628c25356018e80b1a55b2575efcdf1803c71c8189c13ea9c0e"}}}, 0x0) 06:47:06 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x3f) 06:47:06 executing program 1: memfd_create(&(0x7f0000000100)='memory.swap.max\x00', 0x4) 06:47:06 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @random="407773677cc4", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @loopback, @random="dae79ed0aa45"}}}}, 0x0) 06:47:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fsync(r0) 06:47:06 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) poll(&(0x7f0000000040)=[{}, {}, {r0}, {}], 0x4, 0x0) 06:47:06 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x3}, 0xc) 06:47:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 06:47:06 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) 06:47:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="c3", 0x1}], 0x2}, 0x0) 06:47:06 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 06:47:06 executing program 0: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 06:47:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x302, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 06:47:06 executing program 0: socket$inet6(0x18, 0x0, 0x5) 06:47:06 executing program 2: mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', 0x0) 06:47:06 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) 06:47:06 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffffb}) 06:47:06 executing program 0: mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) 06:47:06 executing program 4: bind$unix(0xffffffffffffff9c, 0x0, 0xa) 06:47:06 executing program 5: open$dir(&(0x7f00000000c0)='./file0\x00', 0x280, 0x0) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 06:47:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) poll(&(0x7f0000000040)=[{}, {}, {r0}], 0x3, 0x0) 06:47:06 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001900)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0}, 0x0) 06:47:06 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x490, 0x0) 06:47:06 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @local, @val, {@ipv6}}, 0x0) 06:47:06 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) 06:47:06 executing program 2: chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 06:47:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/22, 0x16) 06:47:06 executing program 5: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, 0x0) 06:47:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2, 0x0) 06:47:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 06:47:06 executing program 0: poll(0x0, 0x0, 0x5) 06:47:06 executing program 3: poll(&(0x7f0000000180)=[{}], 0x1, 0x0) 06:47:06 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 06:47:06 executing program 1: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/79) 06:47:06 executing program 2: chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 06:47:06 executing program 5: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 06:47:06 executing program 3: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, 0x0) 06:47:06 executing program 0: symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0) 06:47:06 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8b2}) 06:47:06 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001900)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001700)=[{&(0x7f0000000200)="ba832f5ab20953928c1d8b1dfa4f4c3b91547c14f4bf489ca941f5920c9ad33b37c16fe3eabdc4e9f73e33ee14d52534b12d897dbbecb5d38ea95e8136687d69ec752b8e012203074a26f0984dcd745f38a3ca5d01c8a8ac5b6037cd835f1a45ff93f57ac9b160330f723db81b2d09bb4fb3e916e52a68f4fe71987386de1d44", 0x80}, {&(0x7f0000000280)="9a63a4a1a68619e5a43cf4a8306767a83267a73f472556110573eeb9c2b9deb20cb847a8e6ff73d80fce5362029a5f7fa6669058d597263dbffb5c0d302c9daa61ede6eaaa81", 0x46}, {&(0x7f0000000300)="0e0a648cebb4421cdd76a42bcd644b92528cc6f2356ee2e0aee70fe2862ad4349067bbb7c6af54137a304396c7554d1bcca7d3f0cd978f0ca147de2c40f47832e33c00b9573808a3da80f954b8a04ecab3dd72f0e73dcfdc6bbf342b120cecb00527ae7400a4d1b0e7bee4d10d3c1c9fa4438e9b914bd614b221e8d2c8ce575f20937fc640c1ce", 0x87}, {&(0x7f00000003c0)="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", 0x61c}], 0x4, &(0x7f0000001840)=[@rights, @rights, @cred, @rights, @cred], 0x98}, 0x0) 06:47:06 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) 06:47:07 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) 06:47:07 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) 06:47:07 executing program 3: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 06:47:07 executing program 4: socketpair(0x0, 0x0, 0x4, 0x0) 06:47:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 06:47:07 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000000)) 06:47:07 executing program 0: chmod(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', 0x0) 06:47:07 executing program 3: chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 06:47:07 executing program 4: open(&(0x7f0000000000)='\x00', 0x0, 0x0) 06:47:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/113, &(0x7f0000000080)=0x71) 06:47:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 06:47:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x80108907, 0x0) 06:47:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBSENT(r0, 0x5421, 0x0) 06:47:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8901, &(0x7f0000000180)) 06:47:07 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 06:47:07 executing program 5: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@context={'context', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, '.\''}}]}}) 06:47:07 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) 06:47:07 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) fork() 06:47:07 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 06:47:07 executing program 0: syz_mount_image$msdos(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x1, &(0x7f0000004040)=[{&(0x7f0000003e80)="66da", 0x2, 0x7fff}], 0x40, &(0x7f0000004280)={[{@fat=@errors_remount}, {@fat=@flush}, {@fat=@check_strict}], [{@seclabel}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@appraise}]}) [ 266.100306][ T7512] fuse: Bad value for 'fd' 06:47:07 executing program 3: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:47:07 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000100)) 06:47:07 executing program 1: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x450201, 0x0) 06:47:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)=ANY=[]}) 06:47:07 executing program 4: io_setup(0x500, &(0x7f0000000100)) io_setup(0x10000, &(0x7f0000000000)) 06:47:07 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) read$msr(r0, &(0x7f0000001640)=""/221, 0xdd) [ 266.241947][ T7523] loop0: detected capacity change from 0 to 127 [ 266.271533][ T7523] ======================================================= [ 266.271533][ T7523] WARNING: The mand mount option has been deprecated and 06:47:07 executing program 5: pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 266.271533][ T7523] and is ignored by this kernel. Remove the mand [ 266.271533][ T7523] option from the mount to silence this warning. [ 266.271533][ T7523] ======================================================= 06:47:07 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000003380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x7}}]}}}]}}]}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000003b80), 0xffffffffffffffff) 06:47:07 executing program 2: pipe2$9p(&(0x7f0000000080), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fork() fork() 06:47:07 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) [ 266.419565][ T7523] FAT-fs (loop0): Unrecognized mount option "seclabel" or missing value 06:47:07 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x4c9c0, 0x0) 06:47:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8914, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x9d6, 0x1}, 0x48) 06:47:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') [ 266.555785][ T25] audit: type=1800 audit(1640155627.911:54): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1189 res=0 errno=0 06:47:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8937, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x80) 06:47:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8983, 0x0) [ 266.737501][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 266.977359][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 267.097686][ T7] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.114944][ T7] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 0 06:47:08 executing program 3: socketpair(0xa, 0x1, 0x0, &(0x7f00000001c0)) 06:47:08 executing program 4: syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x0) [ 267.144035][ T7] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 32 [ 267.218951][ T7] usb 6-1: config 1 interface 0 has no altsetting 0 [ 267.398196][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 267.407583][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.415560][ T7] usb 6-1: Product: syz [ 267.420007][ T7] usb 6-1: Manufacturer: syz [ 267.424811][ T7] usb 6-1: SerialNumber: syz [ 267.447774][ T7540] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 267.733997][ T7] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 127 proto 3 vid 0x0525 pid 0xA4A8 [ 267.748483][ T7] usb 6-1: USB disconnect, device number 7 [ 267.765890][ T7] usblp0: removed 06:47:09 executing program 5: io_setup(0x500, &(0x7f0000000100)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 06:47:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x16, 0x0, 0x9, 0xfff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 06:47:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x40049409, 0x0) 06:47:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000003540)) 06:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c8c1) 06:47:09 executing program 3: creat(&(0x7f0000000680)='./file0\x00', 0x0) mount$9p_xen(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=xen,', {[{@version_9p2000}]}}) 06:47:09 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x16}, 0x10) 06:47:09 executing program 1: setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000008b80)='\x00', 0x0, 0x5, &(0x7f0000008f00)=[{&(0x7f0000008bc0)="e3", 0x1}, {&(0x7f0000008c80)='A', 0x1}, {&(0x7f0000008d00)="e4", 0x1}, {&(0x7f0000008dc0)='J', 0x1, 0x2}, {0x0}], 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 06:47:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000080)) 06:47:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000a80)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@posixacl}]}}) 06:47:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890d, 0x0) 06:47:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) [ 268.345131][ T7577] 9pnet: p9_fd_create_tcp (7577): problem connecting socket to 127.0.0.1 [ 268.356625][ T7566] 9pnet: Could not find request transport: xen 06:47:09 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f0000000580)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0, 0x21}, 0x0) 06:47:09 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$9p(r0, &(0x7f00000000c0)='L', 0x1) 06:47:09 executing program 3: setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={0x0, 0xfb, 0xf9, 0x0, 0x0, "a17a0f0b2a765165f3f80dcdce33cf8e", "9e1398001af06764c6f9f7115dec67ce91f4719ba1cff8417192168c04708db588cd47922d5c9e6b464206df38f64b519fa044e320a243b88175e546e4e56694375c3891aa5243b629101c997af2657e4af8c1c96af1d9082188809bfb775998af91cc7fb37167047a79229df4655c076dc1d834fe8c114d409bacb2072212f6b2018639816ba0fae5ea9e303fbf318295b910ba872abed1bdd80a35b6d11b48bfa1eb1db3df0e2f6dabf695b38d06e89d190bc5e7adc181abbefe4643ff6f738fd18d7a52a4d970333bfd325a5263a7d67e0ab70afb57a2b1173ed6de59b4576911f2f9"}, 0xf9, 0x0) 06:47:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80) 06:47:09 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') 06:47:09 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 06:47:09 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) 06:47:09 executing program 5: mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 06:47:09 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x1000) 06:47:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f00000014c0)=[{&(0x7f0000000300)="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", 0xf68, 0x99}, {&(0x7f0000001300)="4a7f", 0x2, 0x7fffffff}], 0x8000, &(0x7f0000001540)) 06:47:10 executing program 0: io_setup(0x500, &(0x7f0000000100)=0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup(r1) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) 06:47:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8993, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_idx]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xdd, &(0x7f00000000c0)=""/221, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8995, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) [ 268.639687][ T7603] loop4: detected capacity change from 0 to 264192 06:47:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 06:47:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb5, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)) 06:47:10 executing program 2: creat(&(0x7f0000000680)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "a17a0f0b2a765165f3f80dcdce33cf8e"}, 0x15, 0x0) setxattr(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=@known='trusted.overlay.opaque\x00', &(0x7f0000000b80)='euid>', 0x5, 0x0) 06:47:10 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000016c0)=[{&(0x7f0000000100)="00f59a5340", 0x5, 0xfffffffffffffffc}], 0x0, 0x0) 06:47:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="74756e6c3000000000000000000000009f449ae75c7132"]}) 06:47:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @l2, @ethernet={0x0, @dev}, @vsock}) 06:47:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) 06:47:10 executing program 0: truncate(&(0x7f0000000700)='./file0\x00', 0x0) 06:47:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x10000, 0x4) [ 268.853583][ T7621] loop3: detected capacity change from 0 to 16383 06:47:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) 06:47:10 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x181000) 06:47:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, 0x0, 0x0) 06:47:10 executing program 3: creat(&(0x7f0000000680)='./file0\x00', 0x0) setxattr(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 06:47:10 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00') 06:47:10 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x4c9c0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0xc, 0x0) 06:47:10 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) 06:47:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000280)=0x4) 06:47:10 executing program 4: socket$netlink(0x10, 0x3, 0xc) 06:47:10 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x109641) 06:47:10 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x4c9c0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0xc, 0x0) [ 269.102315][ T25] audit: type=1800 audit(1640155630.461:55): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1171 res=0 errno=0 06:47:10 executing program 3: rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0/file0/file0\x00') 06:47:10 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f0000008f00)=[{&(0x7f0000008bc0)="e3", 0x1}, {&(0x7f0000008c80)='A', 0x1}, {&(0x7f0000008d00)="e4", 0x1}, {&(0x7f0000008dc0)='J', 0x1}], 0x0, 0x0) 06:47:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8946, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:10 executing program 4: pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:47:10 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[], [{@appraise_type}]}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000780)='./file0\x00') 06:47:10 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x4c9c0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0xc, 0x0) [ 269.246136][ T25] audit: type=1800 audit(1640155630.601:56): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1176 res=0 errno=0 06:47:10 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 06:47:10 executing program 3: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000140)) [ 269.342974][ T7663] tmpfs: Unknown parameter 'appraise_type' [ 269.370827][ T25] audit: type=1800 audit(1640155630.731:57): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1177 res=0 errno=0 06:47:10 executing program 5: io_setup(0x7fff, &(0x7f0000000200)) 06:47:10 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x4c9c0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0xc, 0x0) 06:47:10 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 06:47:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}) 06:47:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r1, 0x2, &(0x7f0000000b80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x781f}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:47:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, r0, 0x9}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x74) pipe2(&(0x7f0000000680), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x240, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0xc0, 0x6, 0x64}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"f012"}}, @common=@frag={{0x30}, {[0xfff, 0xfffffffd], 0x5, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @private2, [0x0, 0xffffff00], [], 'macsec0\x00', 'geneve0\x00', {}, {}, 0x0, 0x81, 0x2, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x2, 0x1, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}, {{@ipv6={@remote, @remote, [], [], 'veth0_to_batadv\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x4, 0x3, 0x1, [0x7, 0x4, 0x4, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 06:47:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vlan1\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 06:47:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000480)="f2", 0x1}, {&(0x7f00000004c0)="7ca035bec674f399015f3c0d50cbfe331facea8b", 0x14, 0x8}], 0x0, 0x0) [ 269.508754][ T25] audit: type=1800 audit(1640155630.871:58): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1171 res=0 errno=0 06:47:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:11 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380), 0x0) 06:47:11 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000008f00), 0x0, 0x0) 06:47:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) [ 269.634647][ T7684] x_tables: duplicate underflow at hook 2 06:47:11 executing program 0: socketpair(0x0, 0x10, 0x0, 0x0) 06:47:11 executing program 5: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x81020, &(0x7f00000021c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 06:47:11 executing program 1: syz_mount_image$vfat(&(0x7f0000003b00), &(0x7f0000003b40)='./file0\x00', 0x0, 0x0, 0x0, 0x3010, &(0x7f0000003ec0)) 06:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 06:47:11 executing program 3: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) 06:47:11 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 06:47:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a1, 0x0) 06:47:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x48) 06:47:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 06:47:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001680)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'tunl0\x00', 'wg2\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c97f7ee8da94aa6b54cb48aebdad86ee4ea8be43d538377bb3a1f4db6030"}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'wlan0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 06:47:11 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 06:47:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc2081, 0x0) write$tun(r0, 0x0, 0x0) 06:47:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f00000014c0)=[{&(0x7f0000000300)="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", 0x1000, 0x99}, {0x0, 0x0, 0x7fffffff}], 0x8000, &(0x7f0000001540)={[{@block_validity}, {@oldalloc}, {@usrquota}, {@resgid}, {@debug}], [{@audit}]}) 06:47:11 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) 06:47:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 06:47:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 06:47:11 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_snmp6\x00') 06:47:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 270.080152][ T7721] loop4: detected capacity change from 0 to 264192 06:47:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 06:47:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r1, 0x2, &(0x7f0000000b80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) 06:47:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8921, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) 06:47:11 executing program 1: unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 06:47:11 executing program 4: pipe(0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_open_dev$mouse(&(0x7f0000001000), 0x0, 0x0) 06:47:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x40) 06:47:11 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x401, 0x8, 0x0, 0x80000001}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000100)={'custom1\x00'}) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000001, 0xffffffffffffffff) prctl$PR_GET_TIMERSLACK(0x1e) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) fork() pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) signalfd4(r0, &(0x7f0000000240)={[0x6]}, 0x8, 0x800) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000280)="690626eac248e5748eb8a70a1b2efcd7b49dbfa16e7211d982043d6e0e57c310ef6a8519ef30dcbf91e37e016fe19d3a58ad97a735ec209ff7748e22c56d457608f0105f8f2d693bfafafadc9521ef25bb67f334cb959af0c8da6042389476d76616846f9773c11da018f7d499d0af1fbd1f8e8343fcf192f70d5061a553cb3dd0c539ecb8", 0x85) fcntl$setsig(r3, 0xa, 0x7) 06:47:11 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x11000, 0x0) 06:47:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8902, 0x0) 06:47:11 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff}) read$msr(r0, 0x0, 0x0) 06:47:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0x208, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'macvtap0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 06:47:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8931, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:11 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x301503, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 06:47:11 executing program 2: sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000003a40)=""/242) 06:47:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)='u', 0x1) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfdef) 06:47:11 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1198c0, 0x0) 06:47:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) 06:47:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x639b4747c8d42c8d}, 0x14}}, 0x0) 06:47:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x40049409, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) 06:47:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xe45fce22049aa415, 0x4) 06:47:12 executing program 1: pipe(&(0x7f00000000c0)) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) fork() 06:47:12 executing program 3: getrusage(0x0, &(0x7f0000000e40)) 06:47:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:12 executing program 4: creat(&(0x7f0000000680)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "a17a0f0b2a765165f3f80dcdce33cf8e"}, 0x15, 0x0) setxattr(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 06:47:12 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='comm\x00') 06:47:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) timerfd_gettime(r0, 0x0) 06:47:12 executing program 3: socket$inet6(0xa, 0x0, 0x7fffffff) 06:47:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @local}}, 0x7a) 06:47:12 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) 06:47:12 executing program 2: connect$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 06:47:12 executing program 5: syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') 06:47:12 executing program 3: creat(&(0x7f0000000680)='./file0\x00', 0x0) statfs(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/153) 06:47:12 executing program 1: clock_gettime(0xf7f0b51c67d36e21, 0x0) 06:47:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'veth1_to_team\x00', @ifru_flags}) 06:47:12 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f00000014c0)=[{&(0x7f0000000300)="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", 0xf68, 0x99}, {&(0x7f0000001300)="4a7f", 0x2, 0x7fffffff}, {&(0x7f0000001400)="1f", 0x1}, {&(0x7f0000001480)='p', 0x1}], 0x0, 0x0) 06:47:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vlan1\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 06:47:12 executing program 5: syz_mount_image$vfat(&(0x7f0000002340), &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)) 06:47:12 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{}, {0x8, 0x0, 0xffffffffffffffff}]}, 0x3c, 0x0) 06:47:12 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$vfat(&(0x7f0000003b00), &(0x7f0000003b40)='./file0\x00', 0x0, 0x4, &(0x7f0000003e40)=[{0x0, 0x0, 0x200}, {&(0x7f0000003c00), 0x0, 0x4973}, {&(0x7f0000003cc0)='7', 0x1}, {&(0x7f0000003d40)='R', 0x1, 0x100000001}], 0x3010, &(0x7f0000003ec0)={[{@utf8no}, {@rodir}, {@numtail}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}]}) [ 271.004957][ T7811] veth1_to_team: mtu less than device minimum 06:47:12 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7}, @ss_cap={0xa}]}}) 06:47:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8971, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) [ 271.060652][ T7817] x_tables: duplicate underflow at hook 3 [ 271.062053][ T7818] loop0: detected capacity change from 0 to 264192 [ 271.100196][ T7820] loop1: detected capacity change from 0 to 264192 06:47:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 06:47:12 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x301503, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 06:47:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 06:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000), 0x4) 06:47:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x891e, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 06:47:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 06:47:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0), 0x4) 06:47:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/xfrm_stat\x00') write$binfmt_elf32(r0, 0x0, 0x0) [ 271.407389][ T921] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 271.667421][ T921] usb 6-1: Using ep0 maxpacket: 8 [ 271.867832][ T921] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 272.052889][ T921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.078800][ T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.111640][ T921] usb 6-1: Product: syz [ 272.132014][ T921] usb 6-1: Manufacturer: syz [ 272.151988][ T921] usb 6-1: SerialNumber: syz [ 272.218641][ T921] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 272.428059][ T921] usb 6-1: USB disconnect, device number 8 06:47:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2={0x1f, 0x0, @fixed}, @phonet, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='bond_slave_1\x00'}) 06:47:14 executing program 2: r0 = timerfd_create(0x9, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000680), 0x8) dup2(r1, r0) 06:47:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0xffffffffffffffff) 06:47:14 executing program 4: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 06:47:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @loopback}, @xdp={0x2c, 0x0, 0x0, 0xb}, @can, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth1_to_batadv\x00', 0x0, 0x0, 0xfffc}) 06:47:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast1}, 0x80) 06:47:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, &(0x7f0000000000)='q', 0x1, 0x44004, &(0x7f00000000c0)=@in={0x2, 0x4e22, @loopback}, 0x80) 06:47:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x25, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, '[-((\\(\\'}}, 0x25) 06:47:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) 06:47:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 06:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x26) 06:47:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x5) 06:47:14 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7}, 0x7) 06:47:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x6}, {0x10, 0x1}], 0x20}, 0x0) 06:47:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @l2tp, @rc, @can, 0xfff}) 06:47:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @loopback}, @xdp={0x2c, 0x0, 0x0, 0xb}, @can, 0x4, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000100)='veth1_to_batadv\x00', 0x0, 0x0, 0xfffc}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20000840) 06:47:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x2081) write$binfmt_elf32(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:47:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x8000, &(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x80) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:47:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80) 06:47:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @loopback}}) 06:47:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0xc814, &(0x7f00000000c0)=@in={0x2, 0x4e1f, @empty}, 0x80) 06:47:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000001300)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x68}, 0x0) 06:47:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000000)="aa2f0bbd1d68d09edc2e569ea98942717d6fbc36d70b81d12c84332cab603b412c49b3f735a749f9263fae763f17515ca1f99afa0619", 0xfffffda2, 0x204a804, &(0x7f0000000040)=@hci, 0x80) 06:47:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000001300)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0xff0}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000003a00000014000000ec0000000000000050"], 0x68}, 0x0) 06:47:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@nojournal_checksum}]}) 06:47:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xbc}}, 0x0) 06:47:14 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) 06:47:14 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f00000094c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:47:14 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x12181, 0x0) 06:47:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0xc1, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) r1 = socket(0x0, 0x4000000000080002, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000001c0)={0x50000001}) socket(0x0, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xf0}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x87, 0x0, 0x9}, {0x2, 0x4, 0x0, 0x7fff}, {0x74d3, 0x7, 0x7}, {0xd3a8, 0x2, 0x0, 0x8}]}, 0x10) bind$packet(r1, &(0x7f0000000000), 0x14) 06:47:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9a"], 0x50}}, 0x0) [ 273.448862][ T7897] loop5: detected capacity change from 0 to 4 [ 273.483958][ T7897] EXT4-fs (loop5): Mount option "nojournal_checksum" incompatible with ext2 06:47:14 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 06:47:14 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x6d, 0x0) 06:47:14 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) 06:47:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 06:47:15 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000a40)={"74c56d8a8b3aa42505d4d9744823b2e2"}) 06:47:15 executing program 3: timer_create(0x0, 0x0, &(0x7f00000002c0)) 06:47:15 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 06:47:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x1000, &(0x7f00000003c0)="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"}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x2880008, r1, 0x2}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) 06:47:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 06:47:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_IES={0xea4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x3f, 0x7f, [@sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @broadcast}}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @device_b}}]}, @NL80211_ATTR_IE={0x1f1, 0x2a, [@preq={0x82, 0x88, @not_ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0xa, [{{}, @device_b}, {}, {{}, @device_b}, {}, {{}, @broadcast}, {{}, @broadcast}, {}, {{}, @device_b}, {{}, @device_b}, {{}, @device_b}]}}, @rann={0x7e, 0x15}, @perr={0x84, 0x4e, {0x0, 0x4, [@ext={{}, @device_a, 0x0, @device_b}, @ext={{}, @broadcast}, @ext={{}, @device_a, 0x0, @device_b}, @ext={{}, @device_a, 0x0, @broadcast}]}}, @challenge={0x10, 0x1}, @chsw_timing={0x68, 0x4}, @ext_channel_switch={0x3c, 0x4}, @ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0xe3, {0x0, 0x7, "dee3eec82ff526a018e202e3658a9c89", "0af63337cdb339935cebcefb02c1cb26c53e1529a398acf209e3df1325704b77", "f0d0cc3d28bead8c80666ad2faba17b57f0064f38ae10cca718eda1fee06e89e", [{0x0, 0x21, "309fe47a40760f192dd18d9bb35ce7bdc6d3c16836501a2828167f8d7cc5b13cf5"}, {0x0, 0x15, "d418ed0b2aeac40a19208d57c481b662640aa9ab3a"}, {0x0, 0xf, "62130ad8fe276b89310c514de3b120"}, {0x0, 0x17, "ad90725cbfae7a690292f6db7ef1ea8653b536a6d858cb"}, {0x0, 0xc, "e793a12f04d2be71c68e5989"}, {0x0, 0xe, "183c507260c80c6027c364b55dd1"}, {0x0, 0xd, "eb4e8c3372c8aab6788db67aba"}]}}]}, @NL80211_ATTR_PROBE_RESP={0x901, 0x91, "6589939a3c64fc3ff0957e51513c4f78ba8378be994afc7b43bb1a00106495eacd11629c67255314f3ebdb8e2280c58b83755d761945878b6b77158127da9980ed460fbfc37545c596607d65f0965dec0080ddda218c273fed7e056933780291b46de4359ef54d47b65c582e16be3933921c010c7101f844bd48dc868ef4e498b9fe3a8041057410c8f193d310701556dcb2b0a5433772a9126344e7b6df8d53d30043cd7a908beabdb887402a30837cdf9e57d08015379bb88aaac55cfb3af2fd992bfbcdc6363cf82004fbcfa0d91bf2413b009b26d7a52e2766835e24e17bc7cc01eaed85f4b56a6c9a5950a4898e19985e30ee69cc06fee679a95c47d135f477a3d2c964c78830581e9eba46f53522807f0ce65a43b4f79a5e3c0cc94bc14c717cf5ff166a55dddb1e62b7303f8744abf55164961b79b50bcdde72870b6115f14b3d811078bf581fb0a8dd13a99483af123684018b6e682e0c6f6fd375711271cb552e4711170fb9bb2d28e00583f81e40def0b5aacc471a4fe20f2388aac16c3cef135aa0ebd25ebdabb6e33bb3a8e99d1ffa817c8329f6c2206e049d331ad4ae1682b3eace91d02917a91f16dd6efb28594d080c51df3344310c69baa9bbe87270be8c3f2260c3a3cb53b3bfbca95ffd35a47801561dacd681bfd44b787e064b14fec39160d63b78b3670f45c358f0ca3f071b0cdd5da01a2bcbac633809839af027c9e8bdf184392fdf02202a001b66f74e78fadee8e53fb13fea4bc8f493460e656fbb761f9bd276b3ce4d64fd9ce4dcbd0b77911942907b34bb1231bc707176770f324364049800513b31c2d9a2a8c6f75f11e38d716d9fa718c90f1d16494e9a81417b03e67f5dacbf4c30f58b2f64a02bc255d32ab9cc92becad2955abba70443c99eb723a97263d5af0c1f1fe355349ae50c63e7dfe4864f6329fab8a961953f4712e4a75cb3b7ccf19db3f8afcfa3a9f2d74c963a5c90abb0cb4b5231c64e9a4fc2ad38625bef469c4cc6bcf4e471b7d0fd6a3c4a32bf374b79bae3e03f3b1988ca47b07fe6f2d42a282b2eab8f4b716da4c31b232e93f46218c39cbd45cf9306c996e5e1455c4f2843d760531a065f64a1479b4a952a1af51dc32c1633be85b4f2feede10f5219063e093093e2343d14ea9d851e309b944a1430ff87d161b2c1e2feb49be020be492bc91aa160e043163129deadf448227125397c75712abee8423bac0f27e69c4deb8f9d222fa9de35391662238c27f88098a171802e7b0a81a030f18d71fdd2450e7e8aab1f3e1fbd7fa984011cf96f36c4fe6b5c6466ad593e2c1390bdf830e4e6d80cef2d6320adb040f017cb872d3d030e7f4ddd17b5c1029108c4623c952fa8e98b31217cf96797ddfd1b727e78f05eb902ab073f12a2a35b27e80015fbebf4625802dac0b79db2c00ad1eeeb900845fdda442e423640fe74ec33cc4daad2d014ecf60b4ddbe4e5fdda16eeae16f8e42b49d012a64581c465ea679d49ead69e7dc061bbabc0dcd19fd56ea0e49e918444554492a6c69deb251639863fe057a304fb3e8eec6e8f1e8219df678d83f653ae640bc929c90107b5630e8df7684c71419f74c4e9249dd1277b5d4f123165427fd6ab889f655554d4e8d8d65a755c7e35854d3e39f39c9ae2c16dc12c0f03027fef01232e70632283428552572b310f67a63153c47791e7af99b237d5c13f01fd225b8aafa49cb196c04ec48ad35d328e3ee4ed09d90b952d4bd557210768c403a433366545971eba876f7f472d840f7d9d58e0a2251e058b3a0c6e507824e5ad0cb9971a08c981591cbe88badd2dbb3daca9e8d8350e8d95ae49c378fe751e2345b345a69d9e911e603506344a63bfa0202d42c97742eb01af1d26d5946390815dff9dd5338a24821fbc61740fc6bdb2f0e49003136a60074945cd7aa2f91b40c2400d22f2382504645f3bb7b6c6cdb4027f12288e6a48a300f938a7ec850f9e58d232499e179bbe088bb068186f6f7212b8dfc5b44ff3daf318736ba5898d7dbd57aff0fad59b4f7ea28d80753bcd1d214fe26745a18d003137cd74c8516b8cdc185b12adb9cc93bfc098d423adce9e20510469e5deb214ba4c75bc0b6cffa40f6c5ff88a7a3c86babcd3296716e64faec4725622c541a3bca369ee7df1827ada01be8dfc634a191bf8049e345ffdf29c3a1db8c8b80a7270e845b6f7e03c3a8b8ac09d9937a09659118659a7a75faa55672f3f0d357c8e39d3b37e24a91dc14c286c546c1a9d13e9b03222c189c6e98438c05473e54a2e540da7f17d54c497f61e26c74412de4d3a1592774d730d0836ce8ee906d835ff1a520d52af9bf21785142657a953d0330a9d42227d8b03d0ff137ef22570b6712da86f4efa9cb4c4b6a55fa5629f750913795854c3488e88bc4c441d7f1958b42fe62f1177c9e93228ea79ac684c57f00fbe2e35c13a920a00a1027faf7fe148f10ed3ca39652ca44aa8f16abe39b29bec91a7ea1989a284f14da65395255cfdf47ce8e22d6995d651d1f3e3b9444883280efa941f8d5929ac2ec6361ee312e3cb52cdc6de365d1f4d27e9c2547a4fcbc0347219132a6f7b1e78939aa82e65eb6cb0338dc26caa04dd8bcc75d62cf003feb81ae1033427ba1a2cca917272a5d81f5800ab47a636d2a31c52c81ef43f67edddc7841f38917041dff75bd5d1a88d97fe8d91ed6b9753bb7c742b8798f69635218758b66e3b1245c7dd9d9a95557f503073d7850e0c61cf9ce9b17c4af2d62d8e1d7f14b74ea4a947a9730fc3a6be4ee1f4fb4ddf8850c8c96e3755a51dbd136b9de6d7457decb23a120817b1ef58ea47661bbbd0d8eadd33eaa0964b3dead3a177eb39a9d73f5d296da5bab214a5b360fd4d74a6075fdca03da1283074db9f81fc5e1dfb86b7263438388547457abaf683c3e68a1a3542074174f0eb76d1a46427f073add57d715290cea0078e091735f17d8612ce7ee87e711d14e5b51fa73fda9aa3a8bb58c84fe1ee3a18d0aca767a798d386af01bcd9bac6f5bd8bc0d124f7350b4499d30cc0d41a812966b04f3393bf655c731dfb027c90937668029f1d5734384c15ecbbeabb826104273069e99fac01d430883ab21c49b838a83f30835334614bf8919a90f15c97c77846e4d5809ad3d94f45c3d00eed85ee11e1d4e158416e5be7bf1f56b3750f8ba5380f21be4d81c95c0201d992bc5be7e4f9f62d6ae4a6bfa1d8fe5c2610114dbd6b9343ef71"}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x278, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "a19fe0a184dc385439e92b44fe78951ad64487f1f3d13368e0772e6056a0511f2562bc4f0853a27b9bbf200a072997c0cb8ed1064371e2a99c90210703397e0d2abc339b32839bf9bba2fcc6262caf5b30820fd9a907a057139eead56b6864e6fbf5822994d0f427e5c24ca6e9d5d791958f9d25bff961d4b2d2aa19a1e250f378876092af510825e984caa2e0298e4bb504448fbb5d11c897302e9adb981e9badec591051d72f6623ac5a9fd3"}, @NL80211_FTM_RESP_ATTR_LCI={0xc1, 0x2, "2e7ca8df617345ad05aea23c94823b0d0621da59977a75bcbddca2cadf772c51b067352a6904f0f3b3207075e70da35a0323eafab1c20428d79217d58e30de94ecef0a091407029f1e53f78c1a571362d83ef90f5fb66ab8a4f3e0e9b4a7f7527435229b9f05e715d663734ec1e51d3d31bb07095763680a2de0af49930876011cf956db980c94b00e8973610830fa36b74c822b99ee3f0389f0a54163f4b8e277fd56ef3e65e2514062f26372f7ffc520d945bb3a8f5e8241e5d5398b"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "3fd3b9b853bf1007acb20a741909138d6c4ec25d3b184359769aaa80feaf8d901d9e29902b4b2470cb394c471ee2ed8f663ade746c2a5b8207da39b8877e99b66bbffb46824592a24bc05a27301cc53796ab92c3f26a8df717e33f35378bc3f9437c49ec461654e6292f64faef97b97d9e663ceb44ba016744a56ad34a07bf7a4b96dd781d56e7e47cb5cda5cdc3ec6256755d87de724d408f679e08114e1acdac373415a7f5b97c7003de376d2b4f0683aba6b6af61cf74d2f66bfa9c4f4af9c8ec5678bcc56c18644da6bd4418629058a297dfd1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1d, 0x3, "5b0e52be0c154630389244210479941acc36401a83635ae75b"}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7}]}, @NL80211_ATTR_BEACON_HEAD={0xc1, 0xe, {@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @void, @val={0x71, 0x7}, @void, [{0xdd, 0x24, "1037e813881895f2e301ddbf843b3c4280ba170de892e82081e1d27fd2c50f705bbe1394"}, {0xdd, 0x4e, "c46888344733f7e8b12e2cc5b4d0235c6be6d2c22caa58b0162e21f6ee6a84e274af34b14d0418d3241fd915657e6d9be45dd42262146614e3bb0a3ac76d76b7121eb4bbd2a54ca56428118b553b"}]}}]]}]}, 0xec4}}, 0x0) 06:47:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0xc1, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) r1 = socket(0x0, 0x4000000000080002, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000001c0)={0x50000001}) socket(0x0, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xf0}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x87, 0x0, 0x9}, {0x2, 0x4, 0x0, 0x7fff}, {0x74d3, 0x7, 0x7}, {0xd3a8, 0x2, 0x0, 0x8}]}, 0x10) bind$packet(r1, &(0x7f0000000000), 0x14) 06:47:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @empty}, 'ip6gretap0\x00'}) 06:47:15 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0xde5fef44c1595252) 06:47:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000000300)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x200010, &(0x7f0000010f00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000140)='./file0\x00', 0xc611) 06:47:15 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="1c0000001200050f0c1000000049b28da562cfd1601890c000000001", 0x6a, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/113, 0x71, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffdfc, @remote}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)='%', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 06:47:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffc, 0x200002, 0x0) [ 274.185553][ T7937] loop5: detected capacity change from 0 to 10 [ 274.210079][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:15 executing program 3: getresuid(&(0x7f0000011f80), &(0x7f0000011fc0), &(0x7f0000012000)) [ 274.288830][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.323964][ T7937] syz-executor.5: attempt to access beyond end of device [ 274.323964][ T7937] loop5: rw=2049, want=237, limit=10 06:47:15 executing program 0: socket$inet(0x2, 0x8000a, 0x8) [ 274.372686][ T7950] netlink: 44293 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000000300)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x200010, &(0x7f0000010f00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000140)='./file0\x00', 0xc611) [ 274.443438][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.605041][ T7959] loop5: detected capacity change from 0 to 10 [ 274.698917][ T7959] syz-executor.5: attempt to access beyond end of device [ 274.698917][ T7959] loop5: rw=2049, want=237, limit=10 06:47:16 executing program 1: syz_open_dev$usbmon(&(0x7f0000003ac0), 0x8, 0x129040) 06:47:16 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') 06:47:16 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c"], 0x98}, 0x0) 06:47:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0xc1, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) r1 = socket(0x0, 0x4000000000080002, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000001c0)={0x50000001}) socket(0x0, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xf0}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x87, 0x0, 0x9}, {0x2, 0x4, 0x0, 0x7fff}, {0x74d3, 0x7, 0x7}, {0xd3a8, 0x2, 0x0, 0x8}]}, 0x10) bind$packet(r1, &(0x7f0000000000), 0x14) 06:47:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 06:47:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000000300)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x200010, &(0x7f0000010f00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000140)='./file0\x00', 0xc611) 06:47:16 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) 06:47:16 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000740)=@abs={0x1}, 0x6e) 06:47:16 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r0) [ 274.922303][ T7969] loop5: detected capacity change from 0 to 10 06:47:16 executing program 0: pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 06:47:16 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000003440)='ns/pid_for_children\x00') [ 275.030996][ T7969] syz-executor.5: attempt to access beyond end of device [ 275.030996][ T7969] loop5: rw=2049, want=237, limit=10 06:47:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f000000d700)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, &(0x7f000000d600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20}, 0x0) 06:47:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, 'veth1_vlan\x00'}) 06:47:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000000300)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x200010, &(0x7f0000010f00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000140)='./file0\x00', 0xc611) 06:47:16 executing program 0: syz_mount_image$tmpfs(&(0x7f0000002180), &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}]}) 06:47:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0xc1, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) r1 = socket(0x0, 0x4000000000080002, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000001c0)={0x50000001}) socket(0x0, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xf0}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x87, 0x0, 0x9}, {0x2, 0x4, 0x0, 0x7fff}, {0x74d3, 0x7, 0x7}, {0xd3a8, 0x2, 0x0, 0x8}]}, 0x10) bind$packet(r1, &(0x7f0000000000), 0x14) 06:47:16 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0xd24) 06:47:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000280)="d4", 0x1}], 0x2}, 0x0) 06:47:16 executing program 2: socketpair(0x1, 0x0, 0xfe, 0x0) 06:47:16 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0xffffffffffffffe8) [ 275.406555][ T7994] loop5: detected capacity change from 0 to 10 06:47:16 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) 06:47:16 executing program 0: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='/!\x00', 0x0) 06:47:16 executing program 1: syz_open_dev$loop(&(0x7f0000005680), 0x0, 0x0) 06:47:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) [ 275.487131][ T7994] syz-executor.5: attempt to access beyond end of device [ 275.487131][ T7994] loop5: rw=2049, want=237, limit=10 06:47:17 executing program 2: request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000440)='/\x01\x8a\xa2D\xb5\xcb\xf9\xa8\x97\x1e\x1f\t\x0fh\x1ag?\x00\x13x\x13J\xbdf\x1e\x12PU\xa4NHG\xcf\x89\xe1\xef\r\x8eL\x1f\r=r\xc6\xbe\x91?\x18\x11\x8fQ\xd1\xdd\xa6\xf6o\x801\xba\xe0\xc9\x8ex\xa6\xb3D\xacL\x9b5\xd6[\xd9<\xdbx\x10\xb7%\xce\xa0+16\xa2\x8a\xe3\x15\xd2SG\xe6\xed\x96\x9a\x99\x8bC\\\xb9\xa8\xd3\x8a\x9c\xb7+\xb0\xf3cS\x01\xd6\xfa\xe05p9\xa9\x0f~H\xd8i-S\xb6@\"\x06\xa5\xad\xa7\x85q\xab\xc0M\xd0F\xb5*Z\f\xad&\x8aMB\xb7\x8c}5\x1ff\xb6s\xab\x11\xa5\xde\x19\x90\xae\xab%\xd3\fb\a\x0f\xd6\xe5\xc8N\xa0\xd0\x83\a\x16O{o%\xea\x1eW\xfb\x7f\xb8\xe7\xd3\r\xc5\xa6 u\xb0P\xb6\b\xcc\xa6&R\x02\xf1r\b\xf0a\xbf\xdb\x1a\xadd\x8c\xc2\x93\x92\x96\x03\xb3\x9f\x97\x9eb\xa6\x1f/J\x1d\x00+\xd9a\xe1Xc\xf9\a_\xfe\xc9\xd5\xcdk\x1d\bky\xb3\x1f\x85@\xe5\x04\x939\xbe\x8a\xf22\xaf\xc5:,\xeb\x04&Z\x93\xe5\x94\xfa\xc4\xa2\xc6\xb1k\xe7\xa6.', 0x0) 06:47:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) 06:47:17 executing program 3: recvmsg$unix(0xffffffffffffffff, 0x0, 0x3df91ce0df750966) 06:47:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 06:47:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) 06:47:17 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) 06:47:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 06:47:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x49, {0x2, 0x0, @local}, 'veth1_vlan\x00'}) 06:47:17 executing program 4: perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) mlockall(0x6) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f000026f000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) 06:47:17 executing program 1: socket$inet(0x2, 0x0, 0xf300000) 06:47:17 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xf, 0x0, 0x0) [ 276.158650][ T25] audit: type=1800 audit(1640155637.521:59): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1192 res=0 errno=0 06:47:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x4, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 06:47:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @empty}}) 06:47:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x229, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 06:47:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900eeff0d0001"], 0x44}}, 0x0) 06:47:18 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) 06:47:18 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 06:47:18 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 06:47:18 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8915, &(0x7f0000000280)) 06:47:18 executing program 3: socketpair(0x18, 0x0, 0x4000, &(0x7f0000000040)) 06:47:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x17, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}}, 0x0) 06:47:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000200)=0x7, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x8804) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xbf6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4040090) connect$rose(0xffffffffffffffff, &(0x7f0000000640)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @null}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={r2}) 06:47:18 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 06:47:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x0, 0x0, 0x0, 0x900}, 0x48) 06:47:18 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, &(0x7f0000000280)) 06:47:18 executing program 3: pipe(&(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000a40)) pselect6(0x40, &(0x7f0000000080)={0x3ff}, 0x0, 0x0, &(0x7f00000004c0), 0x0) [ 276.840799][ T8061] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 06:47:18 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) 06:47:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001400)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:47:18 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r0, 0x0, 0x0, 0x80400) 06:47:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x3, 0x0, 0x0) 06:47:18 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890b, &(0x7f0000000280)) 06:47:18 executing program 3: clock_gettime(0x0, &(0x7f00000001c0)) 06:47:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x7}}, &(0x7f0000000a40)='GPL\x00', 0x5, 0xf8, &(0x7f0000000a80)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:18 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0xe, 0x0, &(0x7f00000000c0)) 06:47:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x0, 0x0, 0x0, 0x40}, 0x48) 06:47:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x4800}]}}, &(0x7f00000000c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) 06:47:18 executing program 3: pipe(&(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000000)) select(0x40, &(0x7f0000000280)={0xff}, 0x0, 0x0, 0x0) 06:47:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x29, 0x0, &(0x7f00000000c0)) 06:47:18 executing program 4: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000900)=[{}], 0x1, 0x40, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='G\x84\xe7R\xb5\xbc\xeal\x01\x86\x01\xff\xff\xff\xff\x00\x00\x00\x00\x1bX\x93\xbbqz\x01o\x81\xa6\x02Wq\x8c\xbfx\xdd\xd4\xf1\aQu8\x99:\x06\xb9\xbe\f&Ws\x83\xd6&s3\v7n0Oj\xff0\xea(\xeb\x986\x14\a\x95:\xeb\xf9A\xfb\x13k\xed{\xed*\xa5p37m\xa8\xa7\x95&\xb0\x93p\xa3\xa7\xda\xf2H\x9f\xf5D\xae\b\x81=\xdb]\xcb\x10\xb7\x89\x8e\x8a\x9a\x80^k\xc9t\x1c\x00\x1a\x1d.\xe5\x18I\aRW\x99\x1f\xb1#\x1efv\xb7\xe8\x01\x03\t\b\x95\xa9Q\x8a\xe2\xbeq\x1e=\xebh\xd1S\x18\xff\xb7\xae\x9c\x9d#\xf7o\xcf\xf3\xeb@\x97\xdc\x9c\r0\xe4^f\xf59g\xa0\xe5\xe4\x1bN\xc6\xff7\xb3\x10\'\xc0\x04\xd5\xef\a70\x8e\xfb\x1e\x15\v\x12Ms7\x03\xa4\xbfv\xaf\xf8\x13F!\x17c\xde$\x1de(\xfb)\xc9\xaam\xad\xda\x03\x16.\xdb,\x86E~gO {J\x17*\x8bX\xb4/\xf9\xa6\xea\x9c\x12\x01\x91\x16\xff}\xa4\x95s\x87vH\xd8f\x01\x1f\xde\x8d0\"\xa3jM\xbb\xd65\xc2\n\x90\xdbP\xe8\xb1\xec\xd4\b\xba\x83\xd1)\x95\x06\xb9\xc1\xd3', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"}) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0xfffffe47) lseek(r0, 0x0, 0x4) open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) 06:47:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) 06:47:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x78}}, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000300)=@tipc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, &(0x7f0000000580)=""/165, 0xa5}, 0x120) 06:47:18 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000280)) 06:47:18 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 06:47:18 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) 06:47:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 06:47:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) 06:47:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14}, 0x14}}, 0x0) 06:47:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 06:47:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000040)=0x7) 06:47:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname$packet(r0, 0x0, &(0x7f0000000040)=0xfffffffffffffe9e) 06:47:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x12, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}}, 0x0) 06:47:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000001c0)) 06:47:19 executing program 3: r0 = socket(0x18, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 06:47:19 executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 06:47:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2}]}}, &(0x7f00000000c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) 06:47:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x3, 0x100}, 0x48) 06:47:19 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x3, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) 06:47:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x388, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) 06:47:19 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) 06:47:19 executing program 4: r0 = socket(0x26, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 06:47:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f00000000c0)={'ip6erspan0\x00', @ifru_hwaddr=@link_local}) 06:47:19 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r0, 0x0, 0x0) 06:47:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x890c, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 06:47:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x6c}}, 0x0) 06:47:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xfffffffa, 0x1f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) 06:47:19 executing program 5: pipe(&(0x7f0000005800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x541b, &(0x7f0000000200)={'syztnl1\x00', 0x0}) 06:47:19 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0x1b, 0x0, 0x0) 06:47:19 executing program 4: socket$inet(0x2, 0x2, 0x8) 06:47:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x4, &(0x7f0000000a00)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000a40)='GPL\x00', 0x5, 0xf8, &(0x7f0000000a80)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:20 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xf, &(0x7f0000000180)={0xffffffff}, 0x8) 06:47:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x0, 0x0, 0xfffffff9, 0x8}, 0x48) 06:47:20 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00'}) 06:47:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 06:47:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000005300)=""/249, 0x2e, 0xf9, 0x1}, 0x20) 06:47:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x8, 0x400, 0x4, 0x1}, 0x48) 06:47:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) 06:47:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000640), 0x4) 06:47:20 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) 06:47:20 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) 06:47:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x8002, &(0x7f0000000a00)=@framed={{}, [@ldst]}, &(0x7f0000000a40)='GPL\x00', 0x5, 0xf8, &(0x7f0000000a80)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:20 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000280)) 06:47:20 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/uts\x00') 06:47:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 06:47:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000000c0)) 06:47:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015a3d114800fedbdf2502"], 0x24}}, 0x0) 06:47:20 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000005300)=""/249, 0x2e, 0xf9, 0x1}, 0x20) 06:47:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:20 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x76, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 06:47:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@default, @remote, @remote, @rose, @remote, @netrom, @default, @netrom]}, &(0x7f0000000180)=0x48) 06:47:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000152) 06:47:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) [ 279.183344][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:20 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000001580)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 06:47:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @loopback}}}) 06:47:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:20 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000180)) 06:47:20 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f00000000c0)) 06:47:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x4020940d, 0x0) 06:47:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 06:47:20 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 06:47:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x18}, 0x48) 06:47:20 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) connect$netrom(r0, 0x0, 0x0) 06:47:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 06:47:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 06:47:20 executing program 1: unshare(0x20c00) 06:47:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x45, 0x0, &(0x7f00000000c0)) 06:47:21 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) 06:47:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x1c, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x38}}, 0x0) 06:47:21 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) 06:47:21 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="098f35bbbe02"}, 0x14) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 06:47:21 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000380)={0x24, @none={0x2}}, 0x14) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={0x0, &(0x7f0000005300)=""/249, 0x0, 0xf9, 0x1}, 0x20) 06:47:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001b00), 0x4) 06:47:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x2d, 0x0, &(0x7f00000000c0)) 06:47:21 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000008c0)=0x80, 0x4) 06:47:21 executing program 0: socket$inet6(0xa, 0x1, 0xea) 06:47:21 executing program 3: r0 = socket(0x1e, 0x80005, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={0x0, &(0x7f0000005300)=""/249, 0x0, 0xf9, 0x1}, 0x20) 06:47:21 executing program 1: socket(0xa, 0x0, 0x300) 06:47:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)='GPL\x00', 0x5, 0xf8, &(0x7f0000000a80)=""/248, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_MASK={0x8}]}, 0x40}}, 0x0) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={0x0, &(0x7f0000005300)=""/249, 0x0, 0xf9, 0x1}, 0x20) 06:47:21 executing program 1: socketpair(0x15, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000021c0), 0xffffffffffffffff) 06:47:21 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @dev}}, 0xfffffffffffffe6a) 06:47:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(0x0, r0) connect$rose(0xffffffffffffffff, &(0x7f0000000640)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @null}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) 06:47:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x3d, 0xf9, 0x1}, 0x20) 06:47:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, &(0x7f00000000c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) 06:47:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x37, 0x0, &(0x7f00000000c0)) 06:47:21 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8505abc6daccfcb, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 06:47:21 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff}) accept4$llc(r0, 0x0, 0x0, 0x0) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x3d, 0xf9, 0x1}, 0x20) 06:47:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:21 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)=']\x00', 0x2) 06:47:21 executing program 2: r0 = epoll_create1(0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0xd0002000}) 06:47:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xfffffffa, 0x0, 0x0, 0x1}, 0x48) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x3d, 0xf9, 0x1}, 0x20) 06:47:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:21 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 06:47:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x25}, 0x0) 06:47:21 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x24, 0x0, &(0x7f00000000c0)) 06:47:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @loopback}}}}) 06:47:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:21 executing program 4: getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:21 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001480)='ns/time_for_children\x00') 06:47:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6, @in=@dev}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) 06:47:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x0) 06:47:21 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) pipe(&(0x7f0000000200)) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:22 executing program 4: getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x541b, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 06:47:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000a40)='GPL\x00', 0x5, 0xf8, &(0x7f0000000a80)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:22 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 06:47:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 06:47:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8971, &(0x7f0000000b40)) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x4d, 0xf9, 0x1}, 0x20) 06:47:22 executing program 4: getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x218080, 0x0) 06:47:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000200)=@sco={0x1f, @fixed}, &(0x7f0000000280)=0x80) 06:47:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x24}, 0x9}, 0x0) 06:47:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, r1, 0x125, 0x0, 0x0, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38}}, 0x0) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x31, 0xf9, 0x1}, 0x20) 06:47:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 06:47:22 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x31, 0xf9, 0x1}, 0x20) 06:47:22 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002000}) 06:47:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000240)=@raw=[@kfunc], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xec, &(0x7f00000002c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001380)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0x44}}, 0x0) 06:47:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}]}, 0x3c}}, 0x0) 06:47:22 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x31, 0xf9, 0x1}, 0x20) 06:47:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:22 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x7) 06:47:22 executing program 1: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 06:47:22 executing program 3: socketpair$unix(0x1, 0x77e89225586981c2, 0x0, 0x0) 06:47:22 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000380)) 06:47:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x1}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x31, 0xf9, 0x1}, 0x20) 06:47:22 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 06:47:22 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback={0x3000000}}}, 0x24) 06:47:22 executing program 1: pipe(&(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000000)) select(0x40, &(0x7f0000000280)={0xff}, 0x0, 0x0, 0x0) 06:47:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 06:47:22 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xda, &(0x7f00000001c0)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:22 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c}, 0x1c}}, 0x0) 06:47:22 executing program 1: unshare(0x0) unshare(0x20400) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) accept$netrom(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 06:47:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, &(0x7f00000000c0)) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 06:47:22 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001b00)=0x100601, 0x4) 06:47:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_j1939(r0, &(0x7f0000000000), 0x18) 06:47:22 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000001fc0)) 06:47:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 06:47:22 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:47:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7}, 0x48) 06:47:23 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38}, 0x38}}, 0x0) 06:47:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25140000000800", @ANYRES32, @ANYBLOB="0c0006"], 0x4c}}, 0x0) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:23 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000380), 0x14) 06:47:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) 06:47:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) 06:47:23 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x0]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0xa, 0x6, 0x3}, 0x14}}, 0x0) [ 281.797960][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.834304][ T8451] Unsupported ieee802154 address type: 0 06:47:23 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001440)={&(0x7f0000001400)='./file0\x00'}, 0x10) 06:47:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015a3d114800fedbdf2507"], 0x24}}, 0x0) 06:47:23 executing program 1: r0 = socket(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) 06:47:23 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 06:47:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x601}, 0x14}}, 0x0) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x0]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:23 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x894b, 0x0) 06:47:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)='GPL\x00', 0x5, 0xf8, &(0x7f0000000a80)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 282.005220][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, 0x0, 0x10) 06:47:23 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 06:47:23 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x0]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@kfunc], &(0x7f0000000100)='GPL\x00', 0x2, 0xde, &(0x7f0000000140)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8993, &(0x7f0000000b40)) 06:47:23 executing program 1: unshare(0x4000100) 06:47:23 executing program 2: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xfffffffa, 0x1f, 0x0, 0x1}, 0x48) 06:47:23 executing program 3: ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x51, &(0x7f0000000280)=""/81, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3}, 0x8, 0x10, 0x0}, 0x80) 06:47:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89b1, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 06:47:23 executing program 0: pipe(&(0x7f0000005800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) 06:47:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x33fe0}}, 0x0) 06:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002080)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000904808000b0000000000080002009500000008000e00010100000c0014"], 0x40}}, 0x0) 06:47:23 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:23 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x11dd0fe8929a8070) 06:47:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:47:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x801c581f, 0x0) 06:47:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 06:47:23 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x4244c2, 0x0) 06:47:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x100}, 0x10) 06:47:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:23 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0x5, 0x0, 0x0) 06:47:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 06:47:23 executing program 1: r0 = socket(0x2, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) 06:47:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x78}}, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000300)=@tipc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/112, 0x70}], 0x2, &(0x7f0000000580)=""/165, 0xa5}, 0x120) 06:47:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:24 executing program 3: mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:47:24 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x24) 06:47:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0xf}}, 0x0) 06:47:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x80) 06:47:24 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001480)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x5450, 0x0) 06:47:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8913, &(0x7f0000000b40)) 06:47:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 06:47:24 executing program 0: r0 = epoll_create1(0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 06:47:24 executing program 1: syz_emit_ethernet(0xe81, &(0x7f0000000000)={@broadcast, @local, @val, {@llc={0x4, {@llc={0x0, 0x0, "98", "6cc941a66270d679406aae1a73cf7f9f53116396e37a5c947c747228d5a9def72348ff23ed20c8d2f8a3ae510379587706f91b2085329f96cf9889b3213524cc543cb39480b372470d87bf6aa90a2ea0a9e9ab82844984d3d510ad2d9cc664c933809905a99692bc60753fab9765d267d210217a488a4e4a4f5ef9a21d8d64a944e0009703e3697720553b8651b160a18bab06418a6182a1fbc8e1494af554a81153a909df4e43e1fac52bcf5f400c72a79461e33c64badf34a676bdcd95544805c7515e7d3dc4149f159e633affdded4467f600244e0ffca0fc7521bf3cacab8d25557f02dba414ee4f9caa958259f0fc125c82e5ee392fa4db2f87d7f1aee8c295fb2e9e0f5fbfda0cf0f4798daa2aae4b20ababdf243d24516e83264d26c7cfb8ba217b8eb4a3ec2a54a55b88a906d33113ee2f3f2b5cae6fc31b477ce4a5ca5ac124ca5adb4109ac51a373501ee2b0a4dbff8aa6d3c4b474488486a5f63ffd59b7f3445aa279c77f4900c6915847bc71d822569484d04d708889dbf60c6e4f31d09ac5b6a28fcd4fd7943f1056725c528934223236293d716e7251c684163b4ad5b301c39d404bc98f8e46a879008cb3502c7a8683d4178b0060318109aa22d34fbaeedb4fd4b5306b881d85b2e2253053cfe2806532b5b13787ed24752fcdf606f30d40766fd566c2acf0a55815e998dbf8fc4a22df06f2e7859ecb65d4a665fa0fb95bf6d3bf081a096630439fd001c73e160cabd4c9e0b198d388fb526ca4dd37ff72875cfe2ec5c0446de780a769c401725596ae39ca27117ac6dfad26608cf1a4a67cfaba804fae58bc957b4aa801dc2df6d9b0523aa7663b2d7d8aabf24b3e6f6120142f628ebb540545495061ef9b6ea0ef1eee3aa81faaa4897c8fbb94c5431e677c73fcc28b02336d13686a5256cc654d71285703f8ca64ddaaae0fe609e7957a44b1fddc187d7f672d00e6cd5afd86977251f8f72b54ab72ad8125b8fac30d42e349573797c604e9dcba444d97443d269f32aed28915812ff7c225c757b34bf88587f03789394dc601dbd33890558fe17138b6b00da1454d6a6992a1ba463f2c1da532c147c6aa3d0d6908483773743a2b7a36c6e79eba784866215f457cdb214ae96844ec98b1763fba62a401850f6e2859734f85fcf11975a6fde9c6dc166985fdd574bc94d3b7dbbf83e272e0ded621d5ea08279f07a5581145d6a0ec8cb5b4bd432f20f3e5582bd6cb9df61d939e44669ee6b5087acd14010b836b2a2243db4942df03a753ab5daea3aac4046e7a16ec37170907e7d9386e2a8e1cb0a7a6561d7afa7649e8468e4f8a0f70b0bb5a2fb8fa8262be73bf6587b8da11b5a0ff5ff19af9bdbdadf22e1e5a470e8f47de9054d1e0128ed372380e8bde134ee7ccf3ee0943129a6bf48c4a4b59ea8aea7536f7f5638950be64014cb0873954f2d02c3bc745f7b61b46d91dbabf1c40c91444a9a592f3c9d05460e0b8c23712c348f05ce6bee36d509c9d79baf142c6e10dd6fc21f031110de14336c056b142fb7e438f1b20402b5507020e82f5e511fff67077e55b1388f9a75d40ba929ccdd6b19629f0f36f57e3a67559d884edad97617f946edb02a9ef38c4cfb3039d68a5f09d722c5e2a22f0fb747ec60df6c0c0d17da670545aca8601d1bd3a954e6b816935963ce56fc69d6223e07006bc128a58f991c4e036a3c673f1819bc97fd2d0cf8a9247b5d66803bd10c6775348b2a4bfed9999b9a462472a81eab31f8a2cf6c4528c165ce346fce6daa261e1aa799c58f44bf2020d767716a29b30554180042e2734d30ee008b7eb65e7190b85bfec64212532f399a228c8c8ffd5b4822a83ad5d9be03d58f7b2ac0fa42e4f077438637a9e2f6fd3659d485fc34111a58ebf6794c734aa2a7fd70fbc176e51ab41236db6fa3f28c28578bf7094b03c3c253d1c9ba2392d21bec606116589f2061007012cccefd79229d02c0d97b91e00c8cee24be7d85b73b41f2ff22773b588acd7cd4911c2b15a1b3b66a171678ce90d2a46cf531b2de82d8262c055a0ac752c41a23f1f9f6385776cf57469b711f249c83e163cc0e5d41bfbf14abd1f91e7137014362878fcbe513517bf1b4ae27d6bf6800830799d61f80da4d825957724f9a70cb089a32064ca20345504317d925220f2766e46684bf6bc06662daba105fcdb34e621b636cc53c81c731dc22bc025bf4b56bc1ef0b0479557e62246e443ca0813012f7cf3cb2b6aeabb9a82429eef412c5284e1410a3f5a2992ab1d2c9b8f03f55f8a2abdfae8e4d85b6d9fa8a69d1150a87e4037dfddcc52dc2a54cc7c053981c540352cf6f11326e7c928c104c959f75d128ad345e3c66da5c888fce4e2d6a5de6cd80a6c81956365b37d25f7842b1b5d653203dcaf223d7423674d9ee9039abdb4ae2eb6e1d5dfa27be73d794bded7cb2f130eba691ee24f4deda4be89ab48d38517c38ec354c0c1fec0bcf98c030e876286a21eaf4caa95852840a23e3c74267984d368e7f9df6213bae3e3a563dda3ed6f13e6022d4415c50bee901cab19833a4f7c0c1169ae8701f62a73d6cc65c62ed78d9fcf11d8e3ea700bde65e5ace5f075c353f87117429941d1113a8e5aa0188c5f39c812458d1c7c2dbb3a4736784487efb88156fcc5c3005eaca0bd2b2932980ac6b2d349c07578246792023376db71d9da07a69451b2dfd7f600b3971da67e8e24a89e22cb151930353c2cd4968c825e38e22b2531e6d92d8aa34a6a6c1317028a4390527ad30529661bf2e2159c8ef489556f93d22460a373db069e3df6e1d0ec7ce8e6452c6ded4e814d0aa3ba07a5388a952b79096bee6d8d6cf62fabe08b77aef246e834b34969d15a4d1f4a13e1be5a15ee1cfd12124dcd840bc741a76c01ea49b93403c02f102447a2fd4250f58a53f8a2adcdd6fe37585ac155442023980803b36ca692dd3ee4eb028d3e2a95dfd4e7d1f32dcced76d4e5eddd5f8ed6bb609d4a3cd71166cbb9463fe44438f12a5afd684abf990e80db2dbda5beacd2e57588bc297064065a87d4a44ce069655e8ecf476683a1394a27de59ef95cc22216f5f8db6989722a1ff13b4c799994ab98e9359bd4d57b71f77697e5878ce8c9d920bbdd14e1275bd8d99a9f596d112ea6e1cecbf1a7bacc6786c9a6056d46dd255a84bbd27f1dda9ac5dccde7222d7c1ffa2cfb06ded71b6a779ab1d2e8e4c88fef83af302054fd143324a6308b64d0c0d1158fa665aabce95ecb7b2524ef091e1988a11834bb0fb506741c076705d4ed7c9ec351b403a7beffc13d210510b5fa83548ef9a719588e2a12d466c07aee6ecc8c4b22c638c6a42f3726414e149442b7f7c571c6d6f2cb3490c666133f6beb43fff5df7bbf40b2e96e92d54581ff3579e122e55ad2a2b2bf4b1f8f43bb8e44f230fbd209bd8dc26ed9ad3236e08346f67b231d78e7f9f2fd4c34965581f1b9386a226f86aa85d3059b3cd53f8d312ccd321753a7b12f266ade1c2df67860ef38fd180d1acbf167bb9c3dc8ea098c4beb8dd62373ee33ec9ace276d230ae7578eafafe9dfee8dd5c447b725c00478060226de5c99d23aee37b10389f8dc62eb3242921cd3090f31cae9e5e7a0a40919d5f8c2b008fc0c7c07702544046d74600746baf7227be8c02eea438a1465cd937be0e19a2098ebcc9f9a0ced9b58996f4d4af515a89df22f4d9d1d927f77e5dd933b1f96576cc5dc58f13bd78f5a0a45a199b7a692eba3cb0be104d0dce35e1086e73021e27cb1953d1932c7d4ae272ebfa4bdf0554e58385ed49f51817d4c1e7028fb650fddabdc7297ad9feb94ddc1c405ae0fec50454851db123d73c137fb8ddc279385e3661a3703ef80545222d0f351ee00f48fbee1f2452a06fb24dfb96b0b941e5d70747ea2005a345f3fe2693051e600371890a1c229b7742f5511dd505a09295c0a0e7f0110b140ca6bad513b9e0bb3c81bd9a1862d488072b2a593a71f5783443ee1e8cc5a3342f8df4aead8a1ea6a7ac5539335bd85829ae192dee4c3292a04fd06aeacecd175b79085c7c066e7c0614c036357417ce5c253e888e2fc8b257aa5a23543e3cd99074048c6e312e17531144624a7d42650b6986813ce42b1fc51a2a0ba4f27f87be6a1d0cabf4a38f4358a2ba1566a4a47e88a98ba834e9e6519adcc824b333b6fcc7fec08aacb4bc1adc681cb03a8d8ebb47fd795c9997764d6ef1b79d91831356cefac7bfb83bb9352c6a65f88d9d925025387acb2263748e397327e2d11c47db28979c1fa66dd9ddbeb32d3485f329124d286e8d4636f6ee8310b9dee06c00cf6210e4a3772c99fd3e1dd141a4de5e0ddfb987a9342e1a374f732447f925b4f08d391ee90bf1c724f35969d74fa232d4c751b2668aec56e58beb1fe516d1ab88d7239117e84acf91882c2cae65412917a2fa687fe9eb381a2ac3a3b246adb65b2354f1adb85095e2e79e76d1f29db7e3d005a1ebfb5d2ea614d805d94cd283abe2af86f5a7939d4683a62cf9492a21cd1a4454cbba0e4699d1146cb4b5347d59081e9e605785446f31bdd0a2f58d5aae7b24d8f43ba61a32e73a2dabc3f806845beb5792f71301a508aba276aedf91e28baf023633bb59e00145be378cba1bdd33972475170268c873bcf9142cc6355eafe97f9fae5dbed7b77b7b57ae5ef1e2602a44afe82635bbf2d795d69003443ce3e1c9c166f165f733a0c1427f9de3a3300dc9bcc7153e63333d92489a9994663e89cfcfa34dd69e2b3a4489ddf3e725d3eee5b785ebf0c76e960841818d14a0d9f4f997b77be08f326f1d3dba794dd0d1770d225fa528b9d7c4db0586cfb4e1867c8f62a33085d9d0052b3c7527cc44d77fb32b0aa105dbfc4e0b60b1a5fb31c50f9ed3283a34ed16ee90fbc661859ad677c05b3a36155a59084ae0cb8390a39890adcd2809ddefca54110fdfce1dceb307930a2252fa2c764984aaed28036f0bdc283cbe16d91ccf145094f5359dfc00985af7d9c3feb283bc5b24db3039a486be40585efd5303a43ce1ad48e3c3fc5d70742b546b779a40d32cb6e43d1939e0d986dd475f74a3adaa75275aa35a1237aba181fd2026916299984ee012ed09dcabd8eb1f3ba377d75a206365e175bdfddaa8763d7d2a9552596ec97d0606354e417b2cee7cd973d82874e8ae815d76b1be9870c450791ead03b0c21c1887"}}}}}, 0x0) 06:47:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9, 0x1}, 0x20) 06:47:24 executing program 2: socket(0x2c, 0x3, 0x5df) 06:47:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x60, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @local}}}]}]}, 0x60}}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)=""/112, 0x70}], 0x2}, 0x0) 06:47:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:47:24 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) 06:47:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x2c, 0x0, &(0x7f00000000c0)) 06:47:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:24 executing program 2: socket(0x15, 0x5, 0x2) 06:47:24 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 06:47:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015a3d114800fedbdf2506"], 0x24}}, 0x0) 06:47:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:24 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000b80)=0x2000) 06:47:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 06:47:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff}}, {{@in6=@local, 0x0, 0x2b}, 0x0, @in6=@mcast1}}, 0xe8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @fastopen={0x22, 0x12, "69450344dd36b51b34916946259540e8"}, @exp_fastopen={0xfe, 0xf, 0xf989, "8f5a000000000000000000"}]}}}}}}}}, 0x0) 06:47:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) [ 283.177967][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:47:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4018aee3, 0x0) 06:47:27 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0x11fffffc7) 06:47:27 executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) 06:47:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c46341792650c48151d20ec4c10e5f56006765430f01d1470f52996c4f0000c4224dac37c4c179e7a4830001c0fe0f01c20f090f0d870a000000", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000001c0)="8aeac16b9c", 0x5}, {&(0x7f0000000140)="ed7a3f", 0x3}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc028ae92, &(0x7f0000000080)) 06:47:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) [ 286.079258][ T25] audit: type=1804 audit(1640155647.441:60): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/394/file0/bus" dev="ramfs" ino=51279 res=1 errno=0 06:47:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:47:27 executing program 3: r0 = syz_io_uring_setup(0x41b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x4a000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x103880, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 06:47:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20601, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7d) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)) r1 = openat(0xffffffffffffffff, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, 0xffffffffffffffff, 0x30075000) r2 = pidfd_open(0x0, 0x0) preadv(r2, 0x0, 0xffffffffffffff37, 0xd9f, 0x0) write$dsp(r0, &(0x7f0000000100)="caa690100ac6fc378b48f653a6c1f3885c193a73e3dbb24558d5b4844bc56cb2c7d372cb4454a6cea53ff6789af870e37577b06ca1ef3866c3ceca30577df854a4ed8fbe8533d0053ba4326c4477e47d95ab47823dcaa8d2dd71ad9e57fa08240251e8c89971ccb36c575c02d85443155c1d7a27e9e98e97e000001f", 0xfd46) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x80000000) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x80) fork() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x802, 0x40) write$khugepaged_scan(r3, &(0x7f00000003c0), 0x8) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000200)=0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 286.195492][ T25] audit: type=1804 audit(1640155647.441:61): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/394/file0/bus" dev="ramfs" ino=51279 res=1 errno=0 06:47:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:27 executing program 2: r0 = syz_io_uring_setup(0x41b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x103880, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@can, 0x80, 0x0, 0x13}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 06:47:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8}}) 06:47:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x2000, 0x0, 0x1e, 0x0, 0x1b7400}}) 06:47:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x10}}) 06:47:27 executing program 1: syz_mount_image$romfs(&(0x7f0000000e80), &(0x7f0000000ec0)='./file0\x00', 0x0, 0x0, 0x0, 0x2201008, &(0x7f0000001280)) 06:47:28 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 06:47:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x1c, {0x2, 0x0, @loopback}, 'veth1_virt_wifi\x00'}) 06:47:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187014, 0x0) 06:47:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 06:47:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:28 executing program 2: mq_open(&(0x7f00000022c0)='{\\$\x00', 0x0, 0x0, &(0x7f0000002300)) 06:47:28 executing program 1: getgid() r0 = socket$unix(0x1, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000001740)) getpgid(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001480)=""/67, 0x43}, {&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/136, 0x88}], 0x5, &(0x7f0000002980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x20) memfd_secret(0x0) fork() geteuid() recvmmsg$unix(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002f80)=""/18, 0x12}, {&(0x7f0000002fc0)=""/214, 0xd6}, {&(0x7f00000030c0)=""/117, 0x75}, {&(0x7f0000003140)=""/78, 0x4e}], 0x4, &(0x7f0000003200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003400)=""/145, 0x91}, {0x0}, {&(0x7f0000003580)=""/204, 0xcc}], 0x3, &(0x7f00000036c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003780)=""/90, 0x5a}], 0x1, &(0x7f0000003840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000003900), 0x6e, &(0x7f0000003b40)=[{0x0}, {&(0x7f0000003a00)=""/155, 0x9b}, {&(0x7f0000003ac0)=""/103, 0x67}], 0x3}}, {{&(0x7f0000003b80)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003c00)=""/196, 0xc4}, {0x0}, {&(0x7f0000003dc0)=""/174, 0xae}, {&(0x7f0000003e80)=""/165, 0xa5}, {&(0x7f0000003f40)=""/229, 0xe5}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x6, &(0x7f0000005a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005240)=""/84, 0x54}, {&(0x7f00000052c0)=""/11, 0xb}, {&(0x7f0000005300)=""/197, 0xc5}, {&(0x7f0000005400)=""/59, 0x3b}, {&(0x7f0000005440)=""/239, 0xef}], 0x5, &(0x7f00000055c0)=ANY=[@ANYBLOB="1c0000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 '], 0xb8}}], 0x6, 0x1, &(0x7f0000005800)={0x77359400}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000005840), 0x18000) memfd_secret(0x0) memfd_secret(0x0) 06:47:28 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:47:28 executing program 2: r0 = io_uring_setup(0x56b0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 06:47:28 executing program 4: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)) 06:47:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\a\t\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 06:47:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:28 executing program 1: r0 = socket$unix(0xa, 0x3, 0x3a) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 06:47:28 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) 06:47:28 executing program 2: epoll_create(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) socket$inet6_sctp(0xa, 0x1, 0x84) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x20) 06:47:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 06:47:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:28 executing program 1: clone3(&(0x7f0000000340)={0x10000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:47:28 executing program 3: r0 = socket$unix(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f00000089c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000080)="4aeb39ac62ec", 0x6}], 0x1}}], 0x1, 0x0) 06:47:28 executing program 0: r0 = socket$unix(0xa, 0x3, 0x2) sendto$unix(r0, 0x0, 0x2000000, 0x0, &(0x7f0000001040)=@abs, 0x6e) [ 287.424578][ T8651] ISOFS: Unable to identify CD-ROM format. 06:47:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x2f, 0xf9, 0x1}, 0x20) 06:47:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000017c0)='l', 0x1}, {&(0x7f0000001840)="16", 0x1}], 0xc0}, 0x0) 06:47:28 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x400) 06:47:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@bridge_newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x34}}, 0x0) 06:47:28 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000200)) 06:47:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x30, 0x0, 0x1}, 0x20) 06:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@ipv6_delroute={0x38, 0x19, 0x201, 0x0, 0x0, {0xa, 0x0, 0x14}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5}}}}, @RTA_PREF={0x5}]}, 0x38}}, 0x0) 06:47:29 executing program 0: r0 = socket$unix(0xa, 0x3, 0x87) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 06:47:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x5, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 06:47:29 executing program 1: r0 = io_uring_setup(0x15f9, &(0x7f0000000080)={0x0, 0x0, 0x2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8000000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001900), 0x222100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) 06:47:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x30, 0x0, 0x1}, 0x20) 06:47:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)) 06:47:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x30, 0x0, 0x1}, 0x20) 06:47:29 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 06:47:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:29 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000005840), 0x0) 06:47:29 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x6, 0xffffffffffffffff, 0x4) 06:47:29 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:47:29 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 06:47:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:29 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x0, 0x0, 0x2, 0x71c1, 0xd1, 0x0, 0x0, 0x92, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/217, 0xd9}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/81, 0x51}], 0x5, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x40000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9}, 0x20) 06:47:29 executing program 1: perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:29 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x81001, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x0, 0x0, 0x71c1, 0xd1, 0x0, 0x0, 0x92, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x20, 0x0, 0x7c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x40}, 0x2010, 0x3ff, 0x5, 0x0, 0x5, 0x9, 0xd8, 0x0, 0x400, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9}, 0x20) 06:47:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005400)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000005300)=""/249, 0x30, 0xf9}, 0x20) 06:47:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 06:47:30 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="93", 0x1}], 0x0, 0x0) 06:47:30 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24}, 0x24}}, 0x0) 06:47:30 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x0, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000440)={{}, "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"}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:47:30 executing program 1: mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f00005a4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) 06:47:30 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x0, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:30 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x7, 0x0, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000440)={{}, "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"}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:47:31 executing program 1: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x0, 0x0, 0x2, 0x71c1, 0xd1, 0x0, 0x0, 0x92, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/217, 0xd9}, {0x0}, {&(0x7f0000000440)=""/52, 0x34}, {0x0}, {&(0x7f0000000640)=""/81, 0x51}], 0x5, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x40000000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 5: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd1, 0x0, 0x0, 0x92}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:31 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x0, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x7, 0x0, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:31 executing program 5: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x40000000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:31 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}}, 0x0) 06:47:31 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x7, 0x0, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:31 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/217, 0xd9}, {0x0}, {&(0x7f0000000440)=""/52, 0x34}, {0x0}, {&(0x7f0000000640)=""/81, 0x51}], 0x5}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:32 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[], &(0x7f0000001900)=""/142, 0x4e, 0x8e}, 0x20) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 06:47:32 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x7, 0x0, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:32 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:32 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x40000000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:32 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x2, 0x0, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:32 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:33 executing program 5: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:33 executing program 2: perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/217, 0xd9}, {0x0}, {&(0x7f0000000440)=""/52, 0x34}, {0x0}, {0x0}], 0x5, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x40000000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:33 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x0, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x92, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x20, 0x4, 0x7c, 0x0, 0x2, 0x0, 0xa03bbb13c6925e84, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x40, 0x7}, 0x2010, 0x3ff, 0x0, 0x6, 0x5, 0x9, 0xd8, 0x0, 0x400, 0x0, 0x8}, 0x0, 0xe, r0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:47:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x200600) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}, {'G'}}}}}}, 0x0) 06:47:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/242, 0xf2}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x14103e, 0x0) read(r2, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @multicast2}, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbb82297ba7cc92cd}, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x2000000a, &(0x7f00000000c0), 0x2}}, {{0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1a000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 06:47:33 executing program 5: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x0, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:33 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x81001, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x92, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x20, 0x4, 0x7c, 0x0, 0x2, 0x0, 0xa03bbb13c6925e84, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x40, 0x7}, 0x2010, 0x3ff, 0x5, 0x6, 0x5, 0x9, 0xd8, 0x0, 0x400, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:47:34 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000440)={{}, "e751893c5c47fd1a042f9ce892fe7c5341dff4dbb071548d87a631241686c4da3cfe9b6f6eed4aa5d3ab80339865237da94d48d308a7b09986b786f8f78de64c2509a23a4db880af845da6ff72fc5ae557b8665473e33a3caeb626590bbe84b07bd5203f05c3edb0f9b259aa5a9b991e4d0d5617d8f5a555824243ba815b53f42949b715a6b541e7e5302853bd6c60dae7ba1e83bc7a62b8248661437daca3aeefee9ff09e7c4f6d3919ea3436d1bed27053e381b7aed3308c44b2d1e2ae95756a1765e9464c8522801aa4c3d0644f36a0ae5415f249d40ced1b40842c627aa5981aab20f8b41fe3260c24320b963f82025c234936b407683be163f06de6411f504b94f524583702408986f2d83091b9ad3582b54aa8313a57221b16dce33d7b4b43124023a7e535f8bf02777997383ea9265daef46c7bd373e3d4a179b7236f80e99ca097e7bf4394307cc623f81ec7b61096c2f0cca8cfedbe977e09b1ded230b3d9c9fcee0dea5adae84d6ca26c6d8757a94508bcc17e376b0ca1fa54c4f8e3e41f002fa42f76dd534c76d5d6a0f64b5f6085df8598f65e6b358fda9fd0df6b2db815c053cee78f97764ae2e854166b08d015c21389a27428c6c22c45da388533763020b253b1a2ae2b86a4c4b346d57a15aed452bdb33d6001e922c2320caeeb5e1bd976ced49cd5081a3a42d17ba0f6caccfb938709d72333abd3b322e048ec6ab606d9f37b51b3ddad48878c57757c84cdc6c18a3b9d29b89ca074c1a3f5faee6b2197491f07ca0919d94b5ef4ddf5c02448c103c96aa234f96f293e5f38a0e9affab00ca5d1daed4f6a9a362a8338596bbabe51301d0a2213a1702e05193f4df209eee7acfe8aa7297c86051fb2258f8a3a507c95908bfeffd4317ca96c22c717335262952ab79fa5071dd16e462cb827a8e03eb62e644c4404bc22c5ffed9aad3e60351c53046ba78b35852797d2822bf8fb907c9db6f081086699cfec8b47d6d9afc48254cdd3205ec6642846dc4b4e25c608d6f3e569ade1f8b9dc8f8c8fbb631539a2e366b3be56829d19c7cd6f1a963c2ef25bfd1986c6def1c06a40e669494b00c022c1576a7c928693342c6e2165d9097fbf0484bf5bdefdf76edb66ca1a4be40a5542ec8801efab61524a0fe1b4f5a3373a484f357b53f0f60f8815b9d867a42ad68fd43f90aeab40bb5ce920640118488634ca5b35abba8775172d7ec3f2c191baa3fcfa44332adb3b9bf4979b3b283fcf19a1830db9025063c465b33220857555930378960d6f25d0c9d1bb83af25d578fe58185d2a8c5257e3cc4f0f6723d3e7ab2a703d2283d8d596af8a7ae72f23dbea8275596907b5db719b7e1a06e5eb5786035d2475d4202795d150929a2dfbee616fcd7422bf480c65dc7af3553ce629405c3f8381ee043cf0126f41fb0c980e18f58e5e266209477fe2306e6423be89d148fb6e1bf55cc83a55a87cd2ed75e9e88484af57cb0bc6ab5c8ed4b88bab2deb8a29840f24d27183893a1dd7ff226b562b0f4b33fb594db065e95782ca400c43628a774dcf91ecd955114d5f707c4d093aa7f3b38ff42c2612eff9577c6afb64e113e2c2023003f9e5f33f4e2d5fba72409c6e05d720d62a07162fe55a300ad8337acf6baddf4523e9ad7435e9f017898c72a1d46da8c5b979cb6c9054f7b0654ec2b39354108bb14e870d609840dd0abecce16b289d172389b97962942dad8214fefb5e89b9db6bfcd6ce969b76775685d88ea01e4043efac04a2f52f57b28d0676eb46910574c48d845a310c6b4a768460fba647eef2d79e50d076185f9c7ac081c3e44ef9dbc9abdb2bffe1c0747a53506108ebe1e810102f5740544243bc08e24b147f12e711f98254dd8f7f9197996c213eebb45f013eec50577ae2881f158292e84dc226bccafc258675253d26c92969690d39d1d3429e5d4d20933ea574b63a7946c4209b4777c903d73c6e80243df1e0b9710b69c4ff3f245883a1a7fb418b1966296ae50cbb0cd31c9578590daecdc062bd675bddc115195fc080ecc91d214d152904afdaddcc85d8db2b7bc0836e6d1aca28b92f1179cff152e4d90402000b4763390cbb24f5a1a163474e0621b8feaeed7e401e2ef6540cf1097ace1ce5fec6ee0a14aa30b3c8cba8560ba563a07898e9e941149dec7e04f41675e6c1827e7e1d84a1621837ff99f34a1fef19ebcb992a6b7747c5e111ea394777d777c536281277b961a3ca853b42a3b28a7d050a5c8c78c38cecd791c3b9bfedd61dee104228a4717080e85cef89fb7dad74a8f4f1944209ec39614845fff7852138445ec5d673277cbf704bc3097bc22a230e05850c6f7d291c3054af0528f9a9a84c15b32bf594a3e1d63f46c4d9cdb646758773b4d9d0ce643ed61329d8dbe484fc9c514e96bc6c2a218596adc9ba94bdd0b042424f179ed43549f0d33f0d8fa346719e1dc30dac6f5fa72eacc524767208d72b1d8e4022ea0a50d1ac3b7ac8d58d66ddf41168ee9264e045247a96ec70f152a68ca883df17c008bf7c0da4ce58f7f488249a37c822fd84bee2fed441c72dab1c96400d5bdb7acb2d47755e1eeb7774857595674d165c7d87618fcd506618e4766b0224be0498f9dceed0aa2875c39710d1510548e71ee4fc0d2f444ed1c335ff34ff42c140f601bb8b03bbfe7158f7edcd5dede418384208b97a4ad683402f40aee78457d3ffc58d06c684a575388d176c1e68ff7ef9bfd3419cc265cbe737c9122c3481f4395021cee3ef4f482fc24a9a70a4ccf3ebb4fc514fa1044dee0ad52322d95aca784119d4523d71ce37167563dd978e67d80c865e54644a8184ffe2a987880cec93b82ad053c066018c6f0095029afc2ebd27e54a0648299695ef23444fee2904acc3a0c51044b30dbe067bab3b8260ac9c99e3ebf7ce283dc611bfb0ddc94942f1efd7a2bb02d741d3740e55a2fb32507d1c2e74957c7fd6e9266204b5b396446b696f91db5ee93665ded2807fac5471cc63a232fa750dc8ee5c80f91365a3346522d813831605d150425284d6625af94090f406abf3d4e93df2215944a5b3c629227c4f3152c29cb96842b767482721593b0831b85001ab7f95198f30ab55d70fbd79932e72df53dc29606e839cb46a5028da1c4c9063f83c21568ca35ddd2d3b30b4f4d771d949abb3e0494a9e98cb153b4b94977c617fd3bc23e4e006b3bfbc8711af58fd0d9696372ad73d2b6ae32bda7c049d0906db89ff23da66d1fe3b05d151be26eacd2532e73eba01bc184a8a42716a80a50283be0049cbc3d95795f68c6d23f887726eae642f83bd8a38a9e91f9c9dc73275df18ff919d95c4e53da04fc86aef5e510d3cc71a736ca446fa25b08de928c8cfdb890b6a7b035fc415798ce0afd7c9cd04bd76801a30db87a0b92405d6e7c4de327c6cd99292323ed5c46ed76a64c9de4b5ec267b7c092bc1044b0840c1c81b8da802fd444db254cc01b3629d8dbe1c6c5428f676b95799373bb0ccba8d77c43a388db5e60b045ddaa6b0cb4ddd84a02bbf02aeeb47a8775157044e92e3fadf41a79ec61c8cda1729890a24111183df29a0deb29424de085ad7f8fc8ad71bdc9f4ce604a560bbf1fa3344da95ff3ed52359dd399937e32c4e9ef0222a0602b37bb2f080a61935c86908ca317c4a8f173399a3364266252412fa27debc1874208f66e910db70bca77cc6214efef5d2d34024e1995943792f3a3658699cfb218f4e7fd600b6a6196a8f3bec6759d2edbd68ee204b7a6fd640b60ae5d77d77eff0693167c275de47a1e789090c7c1d9bf06b1a78ac17b8ec582bbf2f3e36de6e4a0c871c0c71d6b56d62779b342606b06b71db953b053f130971924bd68244de9a9b421c2887ad038adf996931f4ebedc4d93e5db6034c20b3f1d3b5f125fd0ac343fad128332592d4e9e38ed941a80014aad82bba3c911f5c3cbd398d3fa621ae8712f277a5aeda2b7956af822f71f5111a51d2ecfcef3bf2970cb0e6af5f056e58e57f3603df05c600019a4f6f9123a74e36f105255ff2c279bccd737af410a7147f5bd18442d1511feb7b32c43bf94d99f2e98694be276aea2a6de188df96408bd0171f3fb6636cdf874b645c0b9803e27ce3b1a0c277ae032362f30f643305f948e2bcf7a8054fa02ed1c80705ff16db4f746ffe5e81d2307982c2e8ef34e9e1fb1392857407402230abb5dd2cb38f1dc8f8c3333c1b251fbd8069d6a283ae1402924ceb3b3b54511a6046d40ed1aee672ba2ddb95658d9661d9b6a07129d0fcaffbf6ef26600e1038c13c97728aff8920214c944c4153e934fbdf9b19c39dccbdd56007fee5db5de01fd70afdb29df2b01969210d3811672a135a0fa7462f499817b8e7f13d06a957d7feb423ff312d5b945a7dac56671d14503d235a70654eed0d1d920f772c4b73e0de950ec33a47e321fff6524b2c3908d80609e018888a70078ef740a0119e2f04f3e0b7a4b9aa6909b05712e2b1fbdfb9757a5ebf13c6d30d89cad69ae0a6dd54df3d9e7b66af9c7f35132ccc2849c7fd9dd08b367e8db4605fd0baf5fe9851b881c8bbc2751ed3846ce5fe9341868aaa48a10eabf1fee3d9bf695ca6aa50fc24ea4cc46fec8c345e1cacc18be16f46e1edceb3ff3ae05e35200c13374d169f7e45c43c6194fb754c13bfcb7e9bcd3f76f81b05bc8786a53ca31349b9b3db746911d64b75457951f8daaf2af8677d99b6a21be9885dd01ee8a116348807aac06c1845fd7c2f6d975e1b0518b53eea6f590dfbcef7433bfe73c7801081304aabed91d5337f2b4d7aa749aea15ba3e985012084b6bd4a4d4a5ad79ed08dc482d89b07780ef122ea6d6cf46e3343472e5f15a452f6260d9f199f0d8f6cd8f2b3961f19169e060d5ab7e822d9cda9049d7440dfd34e459fe60b6e0377e47dec03b4fab1c9c9d8d061674af50e0815d019064331615efc4e4525f2b423495b62d8c1eef64439129e7ed2a57a81e0fab9cdb3ef344e7fca59357ee155b4b2112c10410ef8e3bdcaca8a64be337e8de577b699625734f92653800f07c187b71ba0dc68e55414ce84ca507f687fef3e7ec9715bde4fc469e999481baed415ea8f5971ddd08aa0ed886ec09a3cb4367bb21e7984871c897fde68cf599e3d317526c577ababe07086be70736d4b1813d1746a65467b78aba8c13bd922eaaf38948ca983f95c1c1e3744b00a66b38bd4d6e1f4fe9632aabece2e3acaf22644e5ab49fc9ef65dd9d85237536923641cb9e5c3f60703c3426386f344ea57c57a2250e9e4888e52d5ee96789d7317fb6455c310b6e4ebbb0491e252634068f64245be29b40f2e0a23f90608a6a75ee659d705fb574282475954f35cd9617c5c70511cc1a18722931cc2b9e679f5a4a4047280da5af40ddedf842a2c588eeac49eee747c8dc97f2b2b12f77e3537146bedc01b08922b76a18652c0c073be2a3ed1cc85d8cfc596362b04244675dda6284ba591dbfe9063bb9f4ea02878bd05ca48d77db8c8bde7da5b48fb04c9ee1b6d4e08b000e3f4eea3b6f62d1e3525a0006e61dd854fdede5851c420ee4a9dc1fd89ca30fbfa334aab77f5a69524cee307d9b05cee9cc56abe88a82afd9bd2190d3b6d9ada246be8044998cf956341ecfaf43d3b161ea1f4a5a875e2a240bf8191741b7df4c37989aed79c9be0c5d7ddef9a44e397938f8ff3330393053cc0ad6d64759905480314c25d2a2f13a7b0466c75c6bff8beed519b5df75b00a79159af363dfa215f15d802666b0"}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:47:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:34 executing program 1: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:34 executing program 2: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81001, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x92, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x20, 0x4, 0x7c, 0x0, 0x2, 0x0, 0xa03bbb13c6925e84, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x40, 0x7}, 0x2010, 0x3ff, 0x5, 0x6, 0x5, 0x9, 0xd8, 0x0, 0x400, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x40000000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:34 executing program 0: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81001, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x1}, 0x0, 0x7, 0x1, 0x2, 0x71c1, 0xd1, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:47:34 executing program 1: perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x81001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:47:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:47:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x80108906, 0x0) 06:47:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x82}, 0x98) 06:47:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:47:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a012e2d"], 0xa) 06:47:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendto$inet(r2, 0x0, 0x0, 0x100, &(0x7f0000000180)={0x10, 0x2}, 0x10) 06:47:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:35 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:47:35 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:35 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:35 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:35 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:35 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:36 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:36 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:36 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:36 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:37 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:37 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:37 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:37 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:37 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:37 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:37 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:37 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:37 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:37 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:37 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:37 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) 06:47:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:38 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) [ 296.697254][ T25] audit: type=1804 audit(1640155658.051:62): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/425/bus/file0" dev="sda1" ino=1178 res=1 errno=0 06:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) 06:47:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:47:38 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:47:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:38 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:38 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:47:38 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:47:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:38 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:38 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:38 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:39 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:39 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:39 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:39 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:39 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 298.200366][ T25] audit: type=1804 audit(1640155659.561:63): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/428/bus/file0" dev="sda1" ino=1199 res=1 errno=0 06:47:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:39 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:39 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:39 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 298.400599][ T25] audit: type=1804 audit(1640155659.761:64): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/429/bus/file0" dev="sda1" ino=1200 res=1 errno=0 06:47:39 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:39 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:47:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 298.612627][ T25] audit: type=1804 audit(1640155659.971:65): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/430/bus/file0" dev="sda1" ino=1197 res=1 errno=0 06:47:40 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:40 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:40 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:40 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 298.743782][ T25] audit: type=1804 audit(1640155660.001:66): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/429/bus/file0" dev="sda1" ino=1195 res=1 errno=0 06:47:40 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:40 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 298.910627][ T25] audit: type=1804 audit(1640155660.241:67): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/430/bus/file0" dev="sda1" ino=1200 res=1 errno=0 06:47:40 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:40 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 299.051007][ T25] audit: type=1804 audit(1640155660.321:68): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/434/bus/file0" dev="sda1" ino=1189 res=1 errno=0 06:47:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:40 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:40 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 299.197444][ T25] audit: type=1804 audit(1640155660.411:69): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/431/bus/file0" dev="sda1" ino=1180 res=1 errno=0 [ 299.203816][ T9181] overlayfs: conflicting lowerdir path 06:47:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:40 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 299.342829][ T25] audit: type=1804 audit(1640155660.491:70): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/435/bus/file0" dev="sda1" ino=1201 res=1 errno=0 06:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 299.493204][ T25] audit: type=1804 audit(1640155660.761:71): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/436/bus/file0" dev="sda1" ino=1196 res=1 errno=0 06:47:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:41 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:41 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:41 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:41 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:41 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:41 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:41 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:41 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:41 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 300.250977][ T9220] overlayfs: failed to resolve './file1': -2 [ 300.279825][ T9219] overlayfs: failed to resolve './file1': -2 06:47:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:42 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:42 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:42 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 301.290149][ T9236] overlayfs: failed to resolve './file1': -2 [ 301.294316][ T9233] overlayfs: failed to resolve './file1': -2 06:47:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:42 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:42 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:42 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 301.569632][ T9248] overlayfs: failed to resolve './file1': -2 [ 301.624405][ T9253] overlayfs: failed to resolve './file1': -2 [ 301.634864][ T9255] overlayfs: failed to resolve './file1': -2 [ 301.698186][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 301.698200][ T25] audit: type=1804 audit(1640155663.061:78): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/440/bus/file0" dev="sda1" ino=1177 res=1 errno=0 06:47:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:43 executing program 0: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:43 executing program 1: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:43 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:43 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:43 executing program 0: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 302.253870][ T9267] overlayfs: failed to resolve './file1': -2 06:47:43 executing program 1: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:43 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:43 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 302.301975][ T25] audit: type=1804 audit(1640155663.661:79): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/441/bus/file0" dev="sda1" ino=1202 res=1 errno=0 06:47:43 executing program 0: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:43 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 302.441380][ T9279] overlayfs: failed to resolve './file1': -2 [ 302.474949][ T25] audit: type=1804 audit(1640155663.831:80): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/442/bus/file0" dev="sda1" ino=1186 res=1 errno=0 06:47:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:44 executing program 1: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:44 executing program 5: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:44 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:44 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:44 executing program 5: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:44 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:44 executing program 5: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:44 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 303.617344][ T7] Bluetooth: hci1: command 0x0406 tx timeout 06:47:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:45 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:45 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:45 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:45 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:45 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:45 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 304.116631][ T9326] overlayfs: failed to resolve './file1': -2 06:47:45 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 304.149462][ T25] audit: type=1804 audit(1640155665.511:81): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/443/bus/file0" dev="sda1" ino=1179 res=1 errno=0 [ 304.181253][ T9331] overlayfs: failed to resolve './file1': -2 06:47:45 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 304.290910][ T25] audit: type=1804 audit(1640155665.571:82): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/444/bus/file0" dev="sda1" ino=1201 res=1 errno=0 [ 304.330826][ T9337] overlayfs: failed to resolve './file1': -2 [ 304.367440][ T25] audit: type=1804 audit(1640155665.711:83): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/444/bus/file0" dev="sda1" ino=1194 res=1 errno=0 06:47:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:46 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:46 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:46 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:46 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 304.885938][ T9344] overlayfs: failed to resolve './file1': -2 [ 304.898449][ T9347] overlayfs: failed to resolve './file1': -2 06:47:46 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 304.914767][ T25] audit: type=1804 audit(1640155666.271:84): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/445/bus/file0" dev="sda1" ino=1202 res=1 errno=0 [ 304.932498][ T9351] overlayfs: failed to resolve './file1': -2 06:47:46 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:46 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 304.994296][ T25] audit: type=1804 audit(1640155666.311:85): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/445/bus/file0" dev="sda1" ino=1203 res=1 errno=0 06:47:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:46 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 305.100339][ T25] audit: type=1804 audit(1640155666.321:86): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/449/bus/file0" dev="sda1" ino=1205 res=1 errno=0 06:47:46 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 305.163680][ T9356] overlayfs: failed to resolve './file1': -2 [ 305.245321][ T25] audit: type=1804 audit(1640155666.571:87): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/446/bus/file0" dev="sda1" ino=1199 res=1 errno=0 [ 305.269991][ T9366] overlayfs: failed to resolve './file1': -2 06:47:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:46 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:46 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:46 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:46 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:46 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:46 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 305.568619][ T9377] overlayfs: failed to resolve './file1': -2 06:47:47 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:47 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:47 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:47 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:47 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:47 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:47 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:47 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:47 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 06:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:47 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:47 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:47 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:48 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:48 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 306.710612][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 306.710626][ T25] audit: type=1804 audit(1640155668.071:98): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/456/bus/file0" dev="sda1" ino=1204 res=1 errno=0 06:47:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 06:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 306.792460][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.815630][ T25] audit: type=1804 audit(1640155668.121:99): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/453/bus/file0" dev="sda1" ino=1203 res=1 errno=0 06:47:48 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:48 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:48 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 306.962576][ T25] audit: type=1804 audit(1640155668.171:100): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/453/bus/file0" dev="sda1" ino=1208 res=1 errno=0 [ 306.975365][ T9474] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 307.089408][ T25] audit: type=1804 audit(1640155668.291:101): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/457/bus/file0" dev="sda1" ino=1188 res=1 errno=0 06:47:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 06:47:48 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 307.219857][ T25] audit: type=1804 audit(1640155668.431:102): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/454/bus/file0" dev="sda1" ino=1207 res=1 errno=0 06:47:48 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 307.268583][ T9492] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:48 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 307.342925][ T25] audit: type=1804 audit(1640155668.541:103): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/458/bus/file0" dev="sda1" ino=1184 res=1 errno=0 [ 307.377226][ T9497] overlayfs: missing 'lowerdir' 06:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:48 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 307.491668][ T25] audit: type=1804 audit(1640155668.621:104): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/454/bus/file0" dev="sda1" ino=1200 res=1 errno=0 [ 307.516723][ T9507] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 307.626357][ T9516] overlayfs: missing 'lowerdir' 06:47:49 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 307.687569][ T25] audit: type=1804 audit(1640155668.781:105): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/455/bus/file0" dev="sda1" ino=1184 res=1 errno=0 06:47:49 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 307.732631][ T9521] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:47:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 307.807869][ T25] audit: type=1804 audit(1640155668.831:106): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/459/bus/file0" dev="sda1" ino=1159 res=1 errno=0 [ 307.846299][ T9526] overlayfs: missing 'lowerdir' [ 307.875418][ T9529] overlayfs: missing 'lowerdir' 06:47:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:49 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 307.923014][ T9532] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.948597][ T25] audit: type=1804 audit(1640155668.921:107): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/455/bus/file0" dev="sda1" ino=1190 res=1 errno=0 06:47:49 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 308.020540][ T9539] overlayfs: missing 'lowerdir' 06:47:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 308.052951][ T9542] overlayfs: missing 'lowerdir' 06:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:47:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:49 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 308.118021][ T9544] overlayfs: missing 'lowerdir' 06:47:49 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) [ 308.175343][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 308.252375][ T9554] overlayfs: missing 'lowerdir' 06:47:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 308.284013][ T9555] overlayfs: missing 'lowerdir' [ 308.298070][ T9558] overlayfs: missing 'lowerdir' 06:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:47:49 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:49 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 308.355230][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 308.435654][ T9565] overlayfs: missing 'lowerdir' [ 308.459029][ T9567] overlayfs: missing 'lowerdir' 06:47:49 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 308.490629][ T9571] overlayfs: missing 'lowerdir' 06:47:49 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 308.538872][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:49 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 308.631975][ T9580] overlayfs: missing 'lowerdir' [ 308.656888][ T9579] overlayfs: missing 'lowerdir' [ 308.705148][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.705808][ T9586] overlayfs: missing 'lowerdir' 06:47:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:50 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:50 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:50 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:50 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 309.375487][ T9594] overlayfs: missing 'lowerdir' 06:47:50 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 309.398106][ T9596] overlayfs: missing 'lowerdir' [ 309.406802][ T9597] overlayfs: missing 'lowerdir' 06:47:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:50 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:50 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:50 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 309.548288][ T9601] overlayfs: missing 'lowerdir' 06:47:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 309.612665][ T9607] overlayfs: missing 'lowerdir' [ 309.639784][ T9605] overlayfs: missing 'lowerdir' 06:47:51 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 06:47:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 309.930461][ T9618] overlayfs: unrecognized mount option "workdi" or missing value [ 309.945363][ T9621] overlayfs: missing 'lowerdir' [ 309.950783][ T9620] overlayfs: missing 'lowerdir' 06:47:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:51 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 310.113412][ T9632] overlayfs: unrecognized mount option "workdi" or missing value [ 310.131189][ T9634] overlayfs: missing 'lowerdir' [ 310.140236][ T9635] overlayfs: missing 'lowerdir' 06:47:51 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 310.299372][ T9644] overlayfs: unrecognized mount option "workdi" or missing value [ 310.301047][ T9645] overlayfs: unrecognized mount option "workdi" or missing value [ 310.317556][ T9646] overlayfs: missing 'lowerdir' 06:47:51 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:51 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 310.463066][ T9654] overlayfs: missing 'lowerdir' [ 310.471919][ T9656] overlayfs: unrecognized mount option "workdi" or missing value 06:47:51 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:51 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 310.532781][ T9655] overlayfs: unrecognized mount option "workdi" or missing value 06:47:51 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:51 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:52 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 06:47:52 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 310.694078][ T9669] overlayfs: unrecognized mount option "workdi" or missing value 06:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 310.748063][ T9672] overlayfs: missing 'lowerdir' 06:47:52 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 06:47:52 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 310.818942][ T9675] overlayfs: unrecognized mount option "workdi" or missing value 06:47:52 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 06:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 310.871352][ T9680] overlayfs: missing 'lowerdir' 06:47:52 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) [ 310.988929][ T9687] overlayfs: missing 'lowerdir' [ 310.991336][ T9690] overlayfs: unrecognized mount option "workdi" or missing value 06:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 311.032448][ T9695] overlayfs: missing 'lowerdir' 06:47:52 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:52 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:52 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) [ 311.236862][ T9707] overlayfs: missing 'lowerdir' [ 311.245952][ T9708] overlayfs: missing 'lowerdir' 06:47:52 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 311.298092][ T9710] overlayfs: unrecognized mount option "lower" or missing value 06:47:52 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:52 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:52 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 311.421573][ T9716] overlayfs: unrecognized mount option "lower" or missing value [ 311.443172][ T9722] overlayfs: unrecognized mount option "lower" or missing value [ 311.480793][ T9719] overlayfs: missing 'lowerdir' 06:47:52 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:52 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:52 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 311.618581][ T9730] overlayfs: unrecognized mount option "lower" or missing value [ 311.653474][ T9735] overlayfs: missing 'lowerdir' 06:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 311.664519][ T9736] overlayfs: unrecognized mount option "lower" or missing value 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:53 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 311.735100][ T25] kauditd_printk_skb: 50 callbacks suppressed [ 311.735114][ T25] audit: type=1804 audit(1640155673.091:158): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/472/bus/file0" dev="sda1" ino=1207 res=1 errno=0 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 311.855276][ T9748] overlayfs: unrecognized mount option "lower" or missing value [ 311.864340][ T9744] overlayfs: unrecognized mount option "lowerdir" or missing value [ 311.881015][ T9751] overlayfs: unrecognized mount option "lower" or missing value [ 311.905702][ T25] audit: type=1804 audit(1640155673.261:159): pid=9752 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/473/bus/file0" dev="sda1" ino=1202 res=1 errno=0 06:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:53 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:53 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.058282][ T25] audit: type=1804 audit(1640155673.291:160): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/476/bus/file0" dev="sda1" ino=1207 res=1 errno=0 [ 312.089305][ T9761] overlayfs: unrecognized mount option "lowerdir" or missing value 06:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 312.110064][ T9765] overlayfs: unrecognized mount option "lowerdir" or missing value [ 312.123462][ T9767] overlayfs: unrecognized mount option "lower" or missing value 06:47:53 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.200814][ T25] audit: type=1804 audit(1640155673.301:161): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/473/bus/file0" dev="sda1" ino=1204 res=1 errno=0 06:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.322107][ T9783] overlayfs: unrecognized mount option "lowerdir" or missing value [ 312.330917][ T25] audit: type=1804 audit(1640155673.511:162): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/474/bus/file0" dev="sda1" ino=1189 res=1 errno=0 [ 312.335574][ T9784] overlayfs: unrecognized mount option "lower" or missing value [ 312.364584][ T9782] overlayfs: unrecognized mount option "lowerdir" or missing value 06:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:53 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 312.457900][ T25] audit: type=1804 audit(1640155673.521:163): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/474/bus/file0" dev="sda1" ino=1190 res=1 errno=0 06:47:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:53 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.544384][ T9796] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 312.581260][ T9799] overlayfs: unrecognized mount option "lowerdir" or missing value 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 312.591061][ T25] audit: type=1804 audit(1640155673.521:164): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/477/bus/file0" dev="sda1" ino=1203 res=1 errno=0 06:47:54 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:54 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.668332][ T9807] overlayfs: unrecognized mount option "lowerdir" or missing value 06:47:54 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 312.737348][ T25] audit: type=1804 audit(1640155673.741:165): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/475/bus/file0" dev="sda1" ino=1201 res=1 errno=0 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.806792][ T9818] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 312.810235][ T9815] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:47:54 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 312.844442][ T25] audit: type=1804 audit(1640155673.751:166): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276251649/syzkaller.XA9BCS/475/bus/file0" dev="sda1" ino=1200 res=1 errno=0 [ 312.875106][ T9823] overlayfs: unrecognized mount option "lowerdir" or missing value 06:47:54 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 312.963098][ T25] audit: type=1804 audit(1640155673.821:167): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/478/bus/file0" dev="sda1" ino=1203 res=1 errno=0 06:47:54 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 313.058273][ T9835] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 313.073080][ T9839] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:47:54 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:54 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 313.141355][ T9844] overlayfs: unrecognized mount option "lowerdir" or missing value 06:47:54 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 313.229790][ T9850] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:47:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 313.326389][ T9860] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:47:54 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:54 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:54 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) [ 313.516207][ T9876] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:47:54 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:54 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 313.639430][ T9884] __nla_validate_parse: 8 callbacks suppressed [ 313.639446][ T9884] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 313.742986][ T9892] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:47:55 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:55 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 313.898361][ T9899] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:55 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 314.079195][ T9913] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:55 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 314.230362][ T9924] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 314.295847][ T9924] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:55 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) 06:47:55 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 314.478544][ T9943] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 06:47:55 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:55 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 314.523636][ T9943] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:55 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) 06:47:56 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:56 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 314.695986][ T9957] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 314.746652][ T9957] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:56 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 314.917762][ T9973] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:56 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:56 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 315.094781][ T9985] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:56 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:56 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 315.293654][ T9997] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 06:47:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:56 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:56 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:56 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:56 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:56 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:57 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:47:57 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:57 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:47:57 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:57 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:47:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:47:57 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:57 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:47:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:47:58 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:58 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 06:47:58 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:47:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) [ 316.739295][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 316.739309][ T25] audit: type=1804 audit(1640155678.101:183): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/494/bus/file0" dev="sda1" ino=1190 res=1 errno=0 06:47:58 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:47:58 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) 06:47:58 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)) 06:47:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) [ 316.888894][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.895225][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 06:47:58 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 06:47:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:58 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) (fail_nth: 1) 06:47:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) [ 317.030340][T10120] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 06:47:58 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) (fail_nth: 1) 06:47:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:58 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) 06:47:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) [ 317.141117][T10127] FAULT_INJECTION: forcing a failure. [ 317.141117][T10127] name failslab, interval 1, probability 0, space 0, times 1 06:47:58 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 317.225733][T10127] CPU: 1 PID: 10127 Comm: syz-executor.0 Not tainted 5.16.0-rc6-syzkaller #0 [ 317.234541][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.244614][T10127] Call Trace: [ 317.247900][T10127] [ 317.250837][T10127] dump_stack_lvl+0x201/0x2d8 [ 317.255534][T10127] ? show_regs_print_info+0x12/0x12 [ 317.260755][T10127] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 317.266497][T10127] ? __might_sleep+0xe0/0xe0 [ 317.271296][T10127] ? rcu_read_lock_sched_held+0x89/0x130 [ 317.277010][T10127] should_fail+0x384/0x4b0 [ 317.281507][T10127] ? tomoyo_realpath_from_path+0xd8/0x610 [ 317.287322][T10127] should_failslab+0x5/0x20 [ 317.291890][T10127] __kmalloc+0x94/0x380 [ 317.296098][T10127] ? kfree+0x2f/0x330 [ 317.300098][T10127] tomoyo_realpath_from_path+0xd8/0x610 [ 317.305677][T10127] tomoyo_path_number_perm+0x219/0x7c0 [ 317.311164][T10127] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 317.316706][T10127] security_file_ioctl+0x55/0xb0 [ 317.321679][T10127] __se_sys_ioctl+0x48/0x170 [ 317.326361][T10127] do_syscall_64+0x44/0xd0 [ 317.330805][T10127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 317.336723][T10127] RIP: 0033:0x7fc11ceece99 [ 317.341148][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 317.360766][T10127] RSP: 002b:00007fc11b862168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:47:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 317.369457][T10127] RAX: ffffffffffffffda RBX: 00007fc11cffff60 RCX: 00007fc11ceece99 [ 317.377444][T10127] RDX: 00000000200003c0 RSI: 00000000c0189436 RDI: 0000000000000004 [ 317.385427][T10127] RBP: 00007fc11b8621d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.393413][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.401481][T10127] R13: 00007ffc4f9aed5f R14: 00007fc11b862300 R15: 0000000000022000 [ 317.409493][T10127] 06:47:58 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) 06:47:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) [ 317.478169][T10138] FAULT_INJECTION: forcing a failure. [ 317.478169][T10138] name failslab, interval 1, probability 0, space 0, times 1 06:47:58 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 317.550053][T10138] CPU: 1 PID: 10138 Comm: syz-executor.5 Not tainted 5.16.0-rc6-syzkaller #0 [ 317.558852][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.568918][T10138] Call Trace: [ 317.572208][T10138] [ 317.575150][T10138] dump_stack_lvl+0x201/0x2d8 [ 317.579847][T10138] ? show_regs_print_info+0x12/0x12 [ 317.585057][T10138] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 317.590795][T10138] ? __might_sleep+0xe0/0xe0 [ 317.595403][T10138] ? rcu_read_lock_sched_held+0x89/0x130 [ 317.601059][T10138] should_fail+0x384/0x4b0 [ 317.605505][T10138] ? tomoyo_realpath_from_path+0xd8/0x610 [ 317.611238][T10138] should_failslab+0x5/0x20 [ 317.615758][T10138] __kmalloc+0x94/0x380 [ 317.619933][T10138] ? kfree+0x2f/0x330 [ 317.623943][T10138] tomoyo_realpath_from_path+0xd8/0x610 [ 317.629530][T10138] tomoyo_path_number_perm+0x219/0x7c0 [ 317.635014][T10138] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 317.640529][T10138] security_file_ioctl+0x55/0xb0 [ 317.645477][T10138] __se_sys_ioctl+0x48/0x170 [ 317.650075][T10138] do_syscall_64+0x44/0xd0 [ 317.654496][T10138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 317.660389][T10138] RIP: 0033:0x7f4d26216e99 [ 317.664801][T10138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 317.684398][T10138] RSP: 002b:00007f4d24b8c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.692816][T10138] RAX: ffffffffffffffda RBX: 00007f4d26329f60 RCX: 00007f4d26216e99 06:47:59 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 317.700776][T10138] RDX: 00000000200003c0 RSI: 00000000c0189436 RDI: 0000000000000004 [ 317.708736][T10138] RBP: 00007f4d24b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.716742][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.724703][T10138] R13: 00007ffd327ceabf R14: 00007f4d24b8c300 R15: 0000000000022000 [ 317.732687][T10138] [ 317.765594][T10127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.839134][T10138] ERROR: Out of memory at tomoyo_realpath_from_path. 06:47:59 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) (fail_nth: 2) 06:47:59 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:47:59 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:47:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:59 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:59 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) (fail_nth: 2) 06:47:59 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:47:59 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:47:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:47:59 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:47:59 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) [ 318.059863][T10163] FAULT_INJECTION: forcing a failure. [ 318.059863][T10163] name fail_usercopy, interval 1, probability 0, space 0, times 1 06:47:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 318.136220][T10163] CPU: 0 PID: 10163 Comm: syz-executor.5 Not tainted 5.16.0-rc6-syzkaller #0 [ 318.145026][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.155184][T10163] Call Trace: [ 318.158476][T10163] [ 318.161678][T10163] dump_stack_lvl+0x201/0x2d8 [ 318.166382][T10163] ? show_regs_print_info+0x12/0x12 [ 318.171597][T10163] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 318.177331][T10163] ? __might_fault+0xb6/0x110 [ 318.182111][T10163] should_fail+0x384/0x4b0 06:47:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) [ 318.186561][T10163] _copy_from_user+0x2d/0x170 [ 318.191344][T10163] kstrtouint_from_user+0xd6/0x2a0 [ 318.196476][T10163] ? kstrtol_from_user+0x310/0x310 [ 318.201613][T10163] ? read_lock_is_recursive+0x10/0x10 [ 318.207109][T10163] proc_fail_nth_write+0xa5/0x290 [ 318.212228][T10163] ? rcu_read_lock_bh_held+0x110/0x110 [ 318.217767][T10163] ? proc_fail_nth_read+0x220/0x220 [ 318.223002][T10163] ? proc_fail_nth_read+0x220/0x220 [ 318.228222][T10163] vfs_write+0x327/0xe90 [ 318.232497][T10163] ? file_end_write+0x230/0x230 [ 318.237396][T10163] ? mutex_lock_nested+0x1a/0x20 [ 318.242349][T10163] ? __fdget_pos+0x24e/0x2f0 [ 318.246951][T10163] ? ksys_write+0x77/0x2c0 [ 318.251393][T10163] ksys_write+0x18f/0x2c0 [ 318.255738][T10163] ? print_irqtrace_events+0x220/0x220 [ 318.261218][T10163] ? __ia32_sys_read+0x80/0x80 [ 318.266005][T10163] ? lockdep_hardirqs_on+0x95/0x140 [ 318.271221][T10163] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 318.277220][T10163] do_syscall_64+0x44/0xd0 [ 318.281675][T10163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.287593][T10163] RIP: 0033:0x7f4d261c99af [ 318.292027][T10163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 318.313641][T10163] RSP: 002b:00007f4d24b6b160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.322081][T10163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d261c99af [ 318.330069][T10163] RDX: 0000000000000001 RSI: 00007f4d24b6b1e0 RDI: 0000000000000003 [ 318.338057][T10163] RBP: 00007f4d24b6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 318.346047][T10163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 318.354031][T10163] R13: 00007ffd327ceabf R14: 00007f4d24b6b300 R15: 0000000000022000 [ 318.356899][T10176] FAULT_INJECTION: forcing a failure. [ 318.356899][T10176] name failslab, interval 1, probability 0, space 0, times 0 [ 318.362029][T10163] [ 318.417455][T10176] CPU: 0 PID: 10176 Comm: syz-executor.0 Not tainted 5.16.0-rc6-syzkaller #0 [ 318.426271][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.436430][T10176] Call Trace: [ 318.439727][T10176] [ 318.442677][T10176] dump_stack_lvl+0x201/0x2d8 [ 318.447378][T10176] ? show_regs_print_info+0x12/0x12 [ 318.452603][T10176] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 318.458351][T10176] ? __might_sleep+0xe0/0xe0 [ 318.462980][T10176] should_fail+0x384/0x4b0 [ 318.467423][T10176] ? tomoyo_encode2+0x25a/0x560 [ 318.472291][T10176] should_failslab+0x5/0x20 [ 318.476806][T10176] __kmalloc+0x94/0x380 [ 318.480983][T10176] ? prepend_path+0xb70/0xb70 [ 318.485700][T10176] tomoyo_encode2+0x25a/0x560 [ 318.490410][T10176] tomoyo_realpath_from_path+0x5c3/0x610 [ 318.496076][T10176] tomoyo_path_number_perm+0x219/0x7c0 [ 318.501562][T10176] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 318.507100][T10176] security_file_ioctl+0x55/0xb0 [ 318.512059][T10176] __se_sys_ioctl+0x48/0x170 [ 318.516668][T10176] do_syscall_64+0x44/0xd0 [ 318.521108][T10176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.527016][T10176] RIP: 0033:0x7fc11ceece99 [ 318.531442][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 318.551234][T10176] RSP: 002b:00007fc11b862168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.559667][T10176] RAX: ffffffffffffffda RBX: 00007fc11cffff60 RCX: 00007fc11ceece99 [ 318.567654][T10176] RDX: 00000000200003c0 RSI: 00000000c0189436 RDI: 0000000000000004 [ 318.575638][T10176] RBP: 00007fc11b8621d0 R08: 0000000000000000 R09: 0000000000000000 [ 318.583623][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.591605][T10176] R13: 00007ffc4f9aed5f R14: 00007fc11b862300 R15: 0000000000022000 [ 318.599695][T10176] [ 318.757444][T10176] ERROR: Out of memory at tomoyo_realpath_from_path. 06:48:00 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) (fail_nth: 3) 06:48:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:48:00 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:48:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:00 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) 06:48:00 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 318.886706][T10184] __nla_validate_parse: 10 callbacks suppressed [ 318.886722][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.907164][T10187] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 06:48:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) 06:48:00 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) 06:48:00 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) 06:48:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:00 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 319.211979][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.283212][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:48:00 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) 06:48:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:00 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) 06:48:00 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) [ 319.389323][ T25] audit: type=1804 audit(1640155680.751:184): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155167033/syzkaller.ASkYqn/503/bus/file0" dev="sda1" ino=1201 res=1 errno=0 06:48:00 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) [ 319.516140][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.523979][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:48:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) 06:48:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) 06:48:01 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x541b, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:01 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 319.799845][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.809117][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:48:01 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:48:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 320.010215][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.038032][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:48:01 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:01 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) 06:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:01 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5450, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:48:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) 06:48:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) 06:48:01 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x541b, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:01 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:01 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:48:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) 06:48:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) 06:48:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:48:02 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5451, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:02 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000"], 0x48}}, 0x0) 06:48:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) 06:48:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:48:02 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) 06:48:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) 06:48:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 1) 06:48:02 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5450, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5452, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 320.878679][ T25] audit: type=1804 audit(1640155682.241:185): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/503/bus/file0" dev="sda1" ino=1197 res=1 errno=0 06:48:02 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 320.995525][T10301] FAULT_INJECTION: forcing a failure. [ 320.995525][T10301] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:48:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) 06:48:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) [ 321.080135][T10301] CPU: 0 PID: 10301 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 321.088952][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.099022][T10301] Call Trace: [ 321.102315][T10301] [ 321.105256][T10301] dump_stack_lvl+0x201/0x2d8 [ 321.109958][T10301] ? show_regs_print_info+0x12/0x12 [ 321.115209][T10301] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 321.120946][T10301] ? __might_fault+0xb6/0x110 [ 321.125659][T10301] should_fail+0x384/0x4b0 [ 321.130106][T10301] _copy_from_user+0x2d/0x170 [ 321.134818][T10301] sendmsg_copy_msghdr+0xbb/0x650 [ 321.139864][T10301] ? __copy_msghdr_from_user+0x620/0x620 [ 321.145534][T10301] __sys_sendmsg+0x250/0x370 [ 321.150154][T10301] ? ____sys_sendmsg+0x910/0x910 [ 321.155127][T10301] ? __context_tracking_exit+0x7a/0xd0 [ 321.160624][T10301] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 321.166623][T10301] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 321.172632][T10301] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 321.178634][T10301] ? lockdep_hardirqs_on+0x95/0x140 [ 321.183853][T10301] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 321.189864][T10301] do_syscall_64+0x44/0xd0 [ 321.194314][T10301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 321.200232][T10301] RIP: 0033:0x7f6dc5fade99 [ 321.204666][T10301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 321.224295][T10301] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.232728][T10301] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 321.240724][T10301] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 321.248883][T10301] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.256874][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.264883][T10301] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 321.272981][T10301] 06:48:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e300000080005"], 0x48}}, 0x0) 06:48:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) 06:48:02 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5451, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5460, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) 06:48:02 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 2) 06:48:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) 06:48:02 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:02 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5452, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x8933, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) 06:48:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) 06:48:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 321.598480][T10333] FAULT_INJECTION: forcing a failure. [ 321.598480][T10333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.667800][T10333] CPU: 1 PID: 10333 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 321.676798][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.686869][T10333] Call Trace: [ 321.690166][T10333] [ 321.693202][T10333] dump_stack_lvl+0x201/0x2d8 [ 321.697904][T10333] ? show_regs_print_info+0x12/0x12 [ 321.703213][T10333] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 321.708957][T10333] ? __might_fault+0xb6/0x110 [ 321.714015][T10333] ? __lock_acquire+0x2b00/0x2b00 [ 321.719072][T10333] should_fail+0x384/0x4b0 [ 321.723518][T10333] _copy_from_user+0x2d/0x170 [ 321.728307][T10333] iovec_from_user+0x13f/0x390 [ 321.733099][T10333] __import_iovec+0xc6/0x530 [ 321.737717][T10333] ? iovec_from_user+0x390/0x390 [ 321.742690][T10333] ? rcu_lock_release+0x9/0x20 [ 321.747479][T10333] import_iovec+0xe6/0x120 [ 321.751922][T10333] sendmsg_copy_msghdr+0x4e0/0x650 [ 321.757063][T10333] ? __copy_msghdr_from_user+0x620/0x620 [ 321.762732][T10333] __sys_sendmsg+0x250/0x370 [ 321.767343][T10333] ? ____sys_sendmsg+0x910/0x910 [ 321.772300][T10333] ? __context_tracking_exit+0x7a/0xd0 [ 321.777769][T10333] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 321.783747][T10333] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 321.789730][T10333] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 321.795717][T10333] ? lockdep_hardirqs_on+0x95/0x140 [ 321.800909][T10333] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 321.806882][T10333] do_syscall_64+0x44/0xd0 [ 321.811295][T10333] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 321.817273][T10333] RIP: 0033:0x7f6dc5fade99 [ 321.821707][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 321.841335][T10333] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.849743][T10333] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 321.857708][T10333] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 06:48:03 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e30000008000500"], 0x48}}, 0x0) [ 321.865687][T10333] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.873655][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.881617][T10333] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 321.889599][T10333] 06:48:03 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x400448c9, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 3) 06:48:03 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5460, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:03 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x400448dd, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:03 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x8933, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 322.251204][T10362] FAULT_INJECTION: forcing a failure. [ 322.251204][T10362] name failslab, interval 1, probability 0, space 0, times 0 06:48:03 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 322.348214][T10362] CPU: 0 PID: 10362 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 322.357141][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.367219][T10362] Call Trace: [ 322.370518][T10362] [ 322.373465][T10362] dump_stack_lvl+0x201/0x2d8 [ 322.378182][T10362] ? show_regs_print_info+0x12/0x12 [ 322.383394][T10362] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 322.389137][T10362] should_fail+0x384/0x4b0 [ 322.393578][T10362] ? __alloc_skb+0xd8/0x5a0 [ 322.398100][T10362] should_failslab+0x5/0x20 [ 322.402624][T10362] kmem_cache_alloc_node+0x75/0x370 [ 322.407842][T10362] __alloc_skb+0xd8/0x5a0 [ 322.412293][T10362] ? netlink_autobind+0x26c/0x2a0 [ 322.417347][T10362] netlink_sendmsg+0x861/0xe60 [ 322.422128][T10362] ? memcpy+0x3c/0x60 [ 322.426213][T10362] ? netlink_getsockopt+0xa60/0xa60 [ 322.431449][T10362] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.436754][T10362] ? security_socket_sendmsg+0x9d/0xb0 [ 322.442248][T10362] ? netlink_getsockopt+0xa60/0xa60 [ 322.447467][T10362] ____sys_sendmsg+0x5b9/0x910 [ 322.452263][T10362] ? __sys_sendmsg_sock+0x30/0x30 [ 322.457324][T10362] __sys_sendmsg+0x280/0x370 [ 322.461939][T10362] ? ____sys_sendmsg+0x910/0x910 [ 322.466908][T10362] ? __context_tracking_exit+0x7a/0xd0 [ 322.472399][T10362] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 322.478403][T10362] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 322.484428][T10362] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 322.490443][T10362] ? lockdep_hardirqs_on+0x95/0x140 [ 322.495677][T10362] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 322.501684][T10362] do_syscall_64+0x44/0xd0 [ 322.506131][T10362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 322.512053][T10362] RIP: 0033:0x7f6dc5fade99 [ 322.516496][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 322.536120][T10362] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:48:03 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x400454ca, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 322.544562][T10362] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 322.552904][T10362] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 322.560899][T10362] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.568888][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.576884][T10362] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 322.584891][T10362] 06:48:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 4) 06:48:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x400448c9, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40049409, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 322.800197][T10383] FAULT_INJECTION: forcing a failure. [ 322.800197][T10383] name failslab, interval 1, probability 0, space 0, times 0 [ 322.879454][T10383] CPU: 1 PID: 10383 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 322.888262][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.898335][T10383] Call Trace: [ 322.901625][T10383] [ 322.904565][T10383] dump_stack_lvl+0x201/0x2d8 [ 322.909262][T10383] ? show_regs_print_info+0x12/0x12 [ 322.914473][T10383] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 322.920211][T10383] ? __might_sleep+0xe0/0xe0 [ 322.924804][T10383] ? rcu_read_lock_sched_held+0x89/0x130 [ 322.930439][T10383] should_fail+0x384/0x4b0 [ 322.934854][T10383] ? netlink_sendmsg+0x861/0xe60 [ 322.939880][T10383] should_failslab+0x5/0x20 [ 322.944393][T10383] __kmalloc_node_track_caller+0x95/0x400 [ 322.950104][T10383] ? kmem_cache_alloc_node+0x25e/0x370 [ 322.955553][T10383] ? __alloc_skb+0xd8/0x5a0 [ 322.960061][T10383] ? netlink_sendmsg+0x861/0xe60 [ 322.965000][T10383] __alloc_skb+0x127/0x5a0 [ 322.969408][T10383] ? netlink_autobind+0x26c/0x2a0 [ 322.974430][T10383] netlink_sendmsg+0x861/0xe60 [ 322.979190][T10383] ? memcpy+0x3c/0x60 [ 322.983175][T10383] ? netlink_getsockopt+0xa60/0xa60 [ 322.988379][T10383] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.993657][T10383] ? security_socket_sendmsg+0x9d/0xb0 [ 322.999109][T10383] ? netlink_getsockopt+0xa60/0xa60 [ 323.004308][T10383] ____sys_sendmsg+0x5b9/0x910 [ 323.009070][T10383] ? __sys_sendmsg_sock+0x30/0x30 [ 323.014094][T10383] __sys_sendmsg+0x280/0x370 [ 323.018673][T10383] ? ____sys_sendmsg+0x910/0x910 [ 323.023612][T10383] ? __context_tracking_exit+0x7a/0xd0 [ 323.029074][T10383] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 323.035048][T10383] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 323.041027][T10383] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 323.047001][T10383] ? lockdep_hardirqs_on+0x95/0x140 [ 323.052190][T10383] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 323.058171][T10383] do_syscall_64+0x44/0xd0 [ 323.062588][T10383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 323.068473][T10383] RIP: 0033:0x7f6dc5fade99 [ 323.072895][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.092496][T10383] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.100905][T10383] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 323.108867][T10383] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 323.116832][T10383] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 06:48:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x400448dd, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 323.124793][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.132752][T10383] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 323.140730][T10383] 06:48:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 5) 06:48:04 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40086602, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:04 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x400454ca, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:04 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40186366, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:04 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40049409, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 323.524331][T10411] FAULT_INJECTION: forcing a failure. [ 323.524331][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:48:04 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 323.637086][T10411] CPU: 1 PID: 10411 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 323.645900][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.655973][T10411] Call Trace: [ 323.659265][T10411] [ 323.662206][T10411] dump_stack_lvl+0x201/0x2d8 [ 323.666907][T10411] ? show_regs_print_info+0x12/0x12 [ 323.672124][T10411] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 323.677864][T10411] ? __might_fault+0xb6/0x110 [ 323.682556][T10411] ? __lock_acquire+0x2b00/0x2b00 [ 323.687607][T10411] should_fail+0x384/0x4b0 [ 323.692052][T10411] _copy_from_iter+0x25b/0x1080 [ 323.696941][T10411] ? _copy_mc_to_iter+0x1540/0x1540 [ 323.702158][T10411] ? trace_kmalloc_node+0x2e/0xe0 [ 323.707215][T10411] ? __kmalloc_node_track_caller+0x27e/0x400 [ 323.713215][T10411] ? kmem_cache_alloc_node+0x25e/0x370 [ 323.718691][T10411] ? netlink_sendmsg+0x861/0xe60 [ 323.723651][T10411] ? __virt_addr_valid+0x21b/0x2d0 [ 323.728875][T10411] ? __phys_addr_symbol+0x2b/0x70 [ 323.733920][T10411] ? __check_object_size+0x2f3/0x3f0 [ 323.739232][T10411] netlink_sendmsg+0x94f/0xe60 [ 323.744022][T10411] ? memcpy+0x3c/0x60 [ 323.748040][T10411] ? netlink_getsockopt+0xa60/0xa60 [ 323.753265][T10411] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 323.758567][T10411] ? security_socket_sendmsg+0x9d/0xb0 [ 323.764053][T10411] ? netlink_getsockopt+0xa60/0xa60 [ 323.769271][T10411] ____sys_sendmsg+0x5b9/0x910 [ 323.774060][T10411] ? __sys_sendmsg_sock+0x30/0x30 [ 323.779112][T10411] __sys_sendmsg+0x280/0x370 [ 323.783723][T10411] ? ____sys_sendmsg+0x910/0x910 [ 323.788683][T10411] ? __context_tracking_exit+0x7a/0xd0 [ 323.794169][T10411] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 323.800158][T10411] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 323.806166][T10411] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 323.812164][T10411] ? lockdep_hardirqs_on+0x95/0x140 [ 323.817381][T10411] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 323.823385][T10411] do_syscall_64+0x44/0xd0 [ 323.827831][T10411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 323.833739][T10411] RIP: 0033:0x7f6dc5fade99 [ 323.838171][T10411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.858677][T10411] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.867113][T10411] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 323.875100][T10411] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 323.883172][T10411] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.891160][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.899143][T10411] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 323.907146][T10411] 06:48:05 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 6) 06:48:05 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x401c5820, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:05 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40086602, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:05 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x4020940d, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:05 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 324.141365][T10436] FAULT_INJECTION: forcing a failure. [ 324.141365][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 324.214127][T10436] CPU: 0 PID: 10436 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 324.222938][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.233012][T10436] Call Trace: [ 324.236306][T10436] [ 324.239258][T10436] dump_stack_lvl+0x201/0x2d8 [ 324.243968][T10436] ? show_regs_print_info+0x12/0x12 [ 324.249181][T10436] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 324.254933][T10436] ? read_lock_is_recursive+0x10/0x10 [ 324.260338][T10436] should_fail+0x384/0x4b0 [ 324.264775][T10436] ? skb_clone+0x1b4/0x360 [ 324.269208][T10436] should_failslab+0x5/0x20 [ 324.273726][T10436] kmem_cache_alloc+0x72/0x310 [ 324.278512][T10436] skb_clone+0x1b4/0x360 [ 324.282780][T10436] netlink_deliver_tap+0x4a8/0x880 [ 324.287931][T10436] netlink_unicast+0x7ea/0x9f0 [ 324.292723][T10436] ? netlink_detachskb+0xa0/0xa0 [ 324.297678][T10436] ? __virt_addr_valid+0x21b/0x2d0 [ 324.302809][T10436] ? __phys_addr_symbol+0x2b/0x70 [ 324.307849][T10436] ? __check_object_size+0x2f3/0x3f0 [ 324.313160][T10436] ? bpf_lsm_netlink_send+0x5/0x10 [ 324.318299][T10436] netlink_sendmsg+0xaea/0xe60 [ 324.323778][T10436] ? memcpy+0x3c/0x60 [ 324.327792][T10436] ? netlink_getsockopt+0xa60/0xa60 [ 324.333021][T10436] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 324.338320][T10436] ? security_socket_sendmsg+0x9d/0xb0 [ 324.343799][T10436] ? netlink_getsockopt+0xa60/0xa60 [ 324.349016][T10436] ____sys_sendmsg+0x5b9/0x910 [ 324.353814][T10436] ? __sys_sendmsg_sock+0x30/0x30 [ 324.358880][T10436] __sys_sendmsg+0x280/0x370 [ 324.363496][T10436] ? ____sys_sendmsg+0x910/0x910 [ 324.368469][T10436] ? __context_tracking_exit+0x7a/0xd0 [ 324.374138][T10436] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 324.380136][T10436] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 324.386151][T10436] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 324.392155][T10436] ? lockdep_hardirqs_on+0x95/0x140 [ 324.397374][T10436] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 324.403379][T10436] do_syscall_64+0x44/0xd0 [ 324.407819][T10436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 324.413734][T10436] RIP: 0033:0x7f6dc5fade99 [ 324.418164][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 324.437781][T10436] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.446215][T10436] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 324.454203][T10436] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 324.462282][T10436] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 324.470251][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.478415][T10436] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 324.486395][T10436] 06:48:05 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 7) 06:48:05 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:48:05 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:05 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40186366, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:05 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:48:05 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 324.688413][T10457] FAULT_INJECTION: forcing a failure. [ 324.688413][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 324.703730][T10457] CPU: 0 PID: 10457 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 324.712530][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.722599][T10457] Call Trace: [ 324.725894][T10457] [ 324.728837][T10457] dump_stack_lvl+0x201/0x2d8 [ 324.733539][T10457] ? show_regs_print_info+0x12/0x12 [ 324.738765][T10457] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 324.744519][T10457] ? __might_sleep+0xe0/0xe0 [ 324.749137][T10457] should_fail+0x384/0x4b0 [ 324.753667][T10457] ? genl_family_rcv_msg_attrs_parse+0xa1/0x290 [ 324.759923][T10457] should_failslab+0x5/0x20 [ 324.764443][T10457] __kmalloc+0x94/0x380 [ 324.768621][T10457] ? safesetid_security_capable+0xad/0x1d0 [ 324.774452][T10457] genl_family_rcv_msg_attrs_parse+0xa1/0x290 [ 324.780545][T10457] genl_rcv_msg+0xc64/0x1480 [ 324.785169][T10457] ? genl_bind+0x360/0x360 [ 324.789606][T10457] ? __lock_acquire+0x1382/0x2b00 [ 324.794681][T10457] ? rcu_read_lock_sched_held+0x89/0x130 [ 324.800331][T10457] ? nl80211_set_interface+0x890/0x890 [ 324.805889][T10457] netlink_rcv_skb+0x200/0x470 [ 324.810676][T10457] ? genl_bind+0x360/0x360 [ 324.815112][T10457] ? netlink_ack+0xb70/0xb70 [ 324.819743][T10457] ? __down_read_common+0x1b0/0x450 [ 324.825227][T10457] ? up_read_non_owner+0x1c0/0x1c0 [ 324.830447][T10457] ? netlink_deliver_tap+0x130/0x880 06:48:06 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x80086301, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:06 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x401c5820, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 324.835774][T10457] genl_rcv+0x24/0x40 [ 324.839792][T10457] netlink_unicast+0x814/0x9f0 [ 324.844587][T10457] ? netlink_detachskb+0xa0/0xa0 [ 324.849548][T10457] ? __virt_addr_valid+0x21b/0x2d0 [ 324.854681][T10457] ? __phys_addr_symbol+0x2b/0x70 [ 324.859751][T10457] ? __check_object_size+0x2f3/0x3f0 [ 324.865063][T10457] ? bpf_lsm_netlink_send+0x5/0x10 [ 324.870198][T10457] netlink_sendmsg+0xaea/0xe60 [ 324.874983][T10457] ? memcpy+0x3c/0x60 [ 324.878993][T10457] ? netlink_getsockopt+0xa60/0xa60 [ 324.884218][T10457] ? bpf_lsm_socket_sendmsg+0x5/0x10 06:48:06 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 324.889517][T10457] ? security_socket_sendmsg+0x9d/0xb0 [ 324.894994][T10457] ? netlink_getsockopt+0xa60/0xa60 [ 324.900216][T10457] ____sys_sendmsg+0x5b9/0x910 [ 324.905011][T10457] ? __sys_sendmsg_sock+0x30/0x30 [ 324.910090][T10457] __sys_sendmsg+0x280/0x370 [ 324.914700][T10457] ? ____sys_sendmsg+0x910/0x910 [ 324.919666][T10457] ? __context_tracking_exit+0x7a/0xd0 [ 324.925174][T10457] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 324.931165][T10457] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 324.937185][T10457] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 324.943183][T10457] ? lockdep_hardirqs_on+0x95/0x140 [ 324.948402][T10457] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 324.954404][T10457] do_syscall_64+0x44/0xd0 [ 324.958841][T10457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 324.964762][T10457] RIP: 0033:0x7f6dc5fade99 [ 324.969189][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 324.988807][T10457] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.997245][T10457] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 325.005232][T10457] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 325.013217][T10457] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 325.021200][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.029185][T10457] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 325.037175][T10457] 06:48:06 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 8) 06:48:06 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) 06:48:06 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x80086601, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:06 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:48:06 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x4020940d, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 325.230377][T10483] FAULT_INJECTION: forcing a failure. [ 325.230377][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 325.250811][T10485] __nla_validate_parse: 15 callbacks suppressed [ 325.250829][T10485] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 06:48:06 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:06 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x801c581f, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 325.308719][T10483] CPU: 0 PID: 10483 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 325.317534][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.327700][T10483] Call Trace: [ 325.331013][T10483] [ 325.334056][T10483] dump_stack_lvl+0x201/0x2d8 [ 325.338782][T10483] ? show_regs_print_info+0x12/0x12 [ 325.344006][T10483] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 325.350024][T10483] should_fail+0x384/0x4b0 [ 325.354472][T10483] ? __alloc_skb+0xd8/0x5a0 06:48:06 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x80086301, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 325.358998][T10483] should_failslab+0x5/0x20 [ 325.363522][T10483] kmem_cache_alloc_node+0x75/0x370 [ 325.368738][T10483] ? nla_memcpy+0x5f/0xb0 [ 325.373094][T10483] __alloc_skb+0xd8/0x5a0 [ 325.377445][T10483] ? cfg80211_iftype_allowed+0x1f2/0x2e0 [ 325.383202][T10483] nl80211_new_interface+0x54c/0xc00 [ 325.386341][T10494] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.388517][T10483] ? nl80211_set_interface+0x890/0x890 [ 325.403328][T10483] ? nl80211_pre_doit+0x4b7/0x5b0 [ 325.408393][T10483] genl_rcv_msg+0x1032/0x1480 [ 325.413108][T10483] ? genl_bind+0x360/0x360 [ 325.417555][T10483] ? __lock_acquire+0x1382/0x2b00 [ 325.422627][T10483] ? rcu_read_lock_sched_held+0x89/0x130 [ 325.428286][T10483] ? nl80211_set_interface+0x890/0x890 [ 325.433783][T10483] netlink_rcv_skb+0x200/0x470 [ 325.438577][T10483] ? genl_bind+0x360/0x360 [ 325.443014][T10483] ? netlink_ack+0xb70/0xb70 [ 325.447624][T10483] ? __down_read_common+0x1b0/0x450 [ 325.453458][T10483] ? up_read_non_owner+0x1c0/0x1c0 [ 325.458579][T10483] ? netlink_deliver_tap+0x130/0x880 [ 325.463907][T10483] genl_rcv+0x24/0x40 [ 325.467903][T10483] netlink_unicast+0x814/0x9f0 [ 325.472703][T10483] ? netlink_detachskb+0xa0/0xa0 [ 325.477655][T10483] ? __virt_addr_valid+0x21b/0x2d0 [ 325.482790][T10483] ? __phys_addr_symbol+0x2b/0x70 [ 325.487943][T10483] ? __check_object_size+0x2f3/0x3f0 [ 325.493253][T10483] ? bpf_lsm_netlink_send+0x5/0x10 [ 325.498390][T10483] netlink_sendmsg+0xaea/0xe60 [ 325.503176][T10483] ? memcpy+0x3c/0x60 [ 325.507191][T10483] ? netlink_getsockopt+0xa60/0xa60 [ 325.512417][T10483] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 325.517722][T10483] ? security_socket_sendmsg+0x9d/0xb0 [ 325.523204][T10483] ? netlink_getsockopt+0xa60/0xa60 [ 325.528429][T10483] ____sys_sendmsg+0x5b9/0x910 [ 325.533395][T10483] ? __sys_sendmsg_sock+0x30/0x30 [ 325.538447][T10483] __sys_sendmsg+0x280/0x370 [ 325.543056][T10483] ? ____sys_sendmsg+0x910/0x910 [ 325.548150][T10483] ? __context_tracking_exit+0x7a/0xd0 [ 325.553613][T10483] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 325.559584][T10483] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 325.565788][T10483] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 325.571777][T10483] ? lockdep_hardirqs_on+0x95/0x140 [ 325.576968][T10483] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 325.582941][T10483] do_syscall_64+0x44/0xd0 [ 325.587356][T10483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 325.593348][T10483] RIP: 0033:0x7f6dc5fade99 [ 325.597756][T10483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 325.617447][T10483] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.625880][T10483] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 325.633930][T10483] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 325.641903][T10483] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 325.649877][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:48:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 9) 06:48:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:48:07 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 325.657843][T10483] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 325.665820][T10483] 06:48:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 06:48:07 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 325.797540][T10501] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.834820][T10505] FAULT_INJECTION: forcing a failure. [ 325.834820][T10505] name failslab, interval 1, probability 0, space 0, times 0 06:48:07 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 325.855534][ T25] audit: type=1804 audit(1640155687.211:186): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir528039702/syzkaller.TK39vt/517/bus/file0" dev="sda1" ino=1201 res=1 errno=0 [ 325.856730][T10506] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.911272][T10505] CPU: 0 PID: 10505 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 325.920083][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.930160][T10505] Call Trace: [ 325.933458][T10505] [ 325.936406][T10505] dump_stack_lvl+0x201/0x2d8 [ 325.941111][T10505] ? show_regs_print_info+0x12/0x12 [ 325.946418][T10505] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 325.952166][T10505] ? __might_sleep+0xe0/0xe0 [ 325.956784][T10505] ? rcu_read_lock_sched_held+0x89/0x130 [ 325.962453][T10505] should_fail+0x384/0x4b0 [ 325.966897][T10505] ? nl80211_new_interface+0x54c/0xc00 [ 325.972377][T10505] should_failslab+0x5/0x20 [ 325.976899][T10505] __kmalloc_node_track_caller+0x95/0x400 [ 325.982642][T10505] ? kmem_cache_alloc_node+0x25e/0x370 [ 325.985510][T10512] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.988116][T10505] ? __alloc_skb+0xd8/0x5a0 [ 325.988153][T10505] ? nl80211_new_interface+0x54c/0xc00 [ 325.988173][T10505] __alloc_skb+0x127/0x5a0 [ 325.988192][T10505] ? cfg80211_iftype_allowed+0x1f2/0x2e0 [ 326.017496][T10505] nl80211_new_interface+0x54c/0xc00 [ 326.022814][T10505] ? nl80211_set_interface+0x890/0x890 [ 326.028302][T10505] ? nl80211_pre_doit+0x4b7/0x5b0 [ 326.033360][T10505] genl_rcv_msg+0x1032/0x1480 [ 326.038079][T10505] ? genl_bind+0x360/0x360 [ 326.042522][T10505] ? __lock_acquire+0x1382/0x2b00 [ 326.047596][T10505] ? rcu_read_lock_sched_held+0x89/0x130 [ 326.053460][T10505] ? nl80211_set_interface+0x890/0x890 06:48:07 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 326.059027][T10505] netlink_rcv_skb+0x200/0x470 [ 326.063821][T10505] ? genl_bind+0x360/0x360 [ 326.068259][T10505] ? netlink_ack+0xb70/0xb70 [ 326.072874][T10505] ? __down_read_common+0x1b0/0x450 [ 326.078103][T10505] ? up_read_non_owner+0x1c0/0x1c0 [ 326.083237][T10505] ? netlink_deliver_tap+0x130/0x880 [ 326.088560][T10505] genl_rcv+0x24/0x40 [ 326.092628][T10505] netlink_unicast+0x814/0x9f0 [ 326.097426][T10505] ? netlink_detachskb+0xa0/0xa0 [ 326.102374][T10505] ? __virt_addr_valid+0x21b/0x2d0 [ 326.107486][T10505] ? __phys_addr_symbol+0x2b/0x70 [ 326.112703][T10505] ? __check_object_size+0x2f3/0x3f0 [ 326.117986][T10505] ? bpf_lsm_netlink_send+0x5/0x10 [ 326.123092][T10505] netlink_sendmsg+0xaea/0xe60 [ 326.127850][T10505] ? memcpy+0x3c/0x60 [ 326.131841][T10505] ? netlink_getsockopt+0xa60/0xa60 [ 326.137054][T10505] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 326.142337][T10505] ? security_socket_sendmsg+0x9d/0xb0 [ 326.147796][T10505] ? netlink_getsockopt+0xa60/0xa60 [ 326.153013][T10505] ____sys_sendmsg+0x5b9/0x910 [ 326.157793][T10505] ? __sys_sendmsg_sock+0x30/0x30 [ 326.162930][T10505] __sys_sendmsg+0x280/0x370 [ 326.167514][T10505] ? ____sys_sendmsg+0x910/0x910 [ 326.172450][T10505] ? __context_tracking_exit+0x7a/0xd0 [ 326.177908][T10505] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 326.183879][T10505] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 326.189869][T10505] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 326.195867][T10505] ? lockdep_hardirqs_on+0x95/0x140 [ 326.201091][T10505] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 326.207068][T10505] do_syscall_64+0x44/0xd0 [ 326.211484][T10505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 326.217737][T10505] RIP: 0033:0x7f6dc5fade99 [ 326.222148][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 326.241753][T10505] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.250161][T10505] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 06:48:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) 06:48:07 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x80086601, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 326.258157][T10505] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 326.267187][T10505] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 326.275225][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.283208][T10505] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 326.291193][T10505] 06:48:07 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 10) 06:48:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) [ 326.469325][T10523] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 326.488320][T10525] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.502848][T10526] FAULT_INJECTION: forcing a failure. [ 326.502848][T10526] name fail_page_alloc, interval 1, probability 0, space 0, times 1 06:48:07 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x801c581f, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:07 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc018945c, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 326.507373][T10523] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.600207][T10526] CPU: 0 PID: 10526 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 326.609022][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.619095][T10526] Call Trace: [ 326.622390][T10526] [ 326.625335][T10526] dump_stack_lvl+0x201/0x2d8 [ 326.630040][T10526] ? show_regs_print_info+0x12/0x12 [ 326.635264][T10526] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 326.641014][T10526] ? stack_trace_save+0x1e0/0x1e0 [ 326.646129][T10526] should_fail+0x384/0x4b0 [ 326.650580][T10526] prepare_alloc_pages+0x1db/0x5a0 [ 326.655727][T10526] __alloc_pages+0x161/0x580 [ 326.660343][T10526] ? __rmqueue_pcplist+0x2090/0x2090 [ 326.665648][T10526] ? kasan_unpoison+0x5d/0x80 [ 326.670316][T10526] ? __kasan_slab_alloc+0x67/0xf0 [ 326.675337][T10526] kmalloc_large_node+0x7c/0x180 [ 326.680303][T10526] __kmalloc_node+0x31c/0x420 [ 326.684977][T10526] kvmalloc_node+0x81/0x110 [ 326.689542][T10526] alloc_netdev_mqs+0x85/0xc40 [ 326.694340][T10526] ? ieee80211_if_setup_no_queue+0xf0/0xf0 [ 326.700190][T10526] ieee80211_if_add+0x1197/0x1df0 [ 326.705221][T10526] ieee80211_add_iface+0xd1/0x1d0 [ 326.710243][T10526] ? ieee80211_set_wakeup+0x100/0x100 [ 326.715613][T10526] nl80211_new_interface+0x600/0xc00 [ 326.720901][T10526] ? nl80211_set_interface+0x890/0x890 [ 326.726365][T10526] ? nl80211_pre_doit+0x4b7/0x5b0 [ 326.731405][T10526] genl_rcv_msg+0x1032/0x1480 [ 326.736079][T10526] ? genl_bind+0x360/0x360 [ 326.740491][T10526] ? __lock_acquire+0x1382/0x2b00 [ 326.745544][T10526] ? rcu_read_lock_sched_held+0x89/0x130 [ 326.751185][T10526] ? nl80211_set_interface+0x890/0x890 [ 326.756650][T10526] netlink_rcv_skb+0x200/0x470 [ 326.761414][T10526] ? genl_bind+0x360/0x360 [ 326.765827][T10526] ? netlink_ack+0xb70/0xb70 [ 326.770406][T10526] ? __down_read_common+0x1b0/0x450 [ 326.775597][T10526] ? up_read_non_owner+0x1c0/0x1c0 [ 326.780696][T10526] ? netlink_deliver_tap+0x130/0x880 [ 326.785979][T10526] genl_rcv+0x24/0x40 [ 326.789965][T10526] netlink_unicast+0x814/0x9f0 [ 326.794731][T10526] ? netlink_detachskb+0xa0/0xa0 [ 326.799660][T10526] ? __virt_addr_valid+0x21b/0x2d0 [ 326.804776][T10526] ? __phys_addr_symbol+0x2b/0x70 [ 326.809797][T10526] ? __check_object_size+0x2f3/0x3f0 [ 326.815090][T10526] ? bpf_lsm_netlink_send+0x5/0x10 [ 326.820199][T10526] netlink_sendmsg+0xaea/0xe60 [ 326.824976][T10526] ? memcpy+0x3c/0x60 [ 326.829080][T10526] ? netlink_getsockopt+0xa60/0xa60 [ 326.834289][T10526] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 326.839718][T10526] ? security_socket_sendmsg+0x9d/0xb0 [ 326.845178][T10526] ? netlink_getsockopt+0xa60/0xa60 [ 326.850895][T10526] ____sys_sendmsg+0x5b9/0x910 [ 326.855659][T10526] ? __sys_sendmsg_sock+0x30/0x30 [ 326.860682][T10526] __sys_sendmsg+0x280/0x370 [ 326.865373][T10526] ? ____sys_sendmsg+0x910/0x910 [ 326.870333][T10526] ? __context_tracking_exit+0x7a/0xd0 [ 326.875811][T10526] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 326.881807][T10526] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 326.887786][T10526] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 326.893762][T10526] ? lockdep_hardirqs_on+0x95/0x140 [ 326.898973][T10526] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 326.904948][T10526] do_syscall_64+0x44/0xd0 [ 326.909381][T10526] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 326.915271][T10526] RIP: 0033:0x7f6dc5fade99 [ 326.919681][T10526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 326.939406][T10526] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:48:08 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x0) [ 326.947836][T10526] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 326.955798][T10526] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 326.963764][T10526] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 326.971728][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.979694][T10526] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 326.987670][T10526] 06:48:08 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) 06:48:08 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc020660b, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:08 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 327.091310][T10535] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 06:48:08 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:08 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) 06:48:08 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:08 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 11) [ 327.236280][T10539] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 327.299732][T10545] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.305794][T10542] netlink: 'syz-executor.4': attribute type 72 has an invalid length. [ 327.317429][T10539] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 06:48:08 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:08 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x2, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:08 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 327.358848][T10548] FAULT_INJECTION: forcing a failure. [ 327.358848][T10548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.406544][T10548] CPU: 0 PID: 10548 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 327.415360][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.425436][T10548] Call Trace: [ 327.428733][T10548] [ 327.431679][T10548] dump_stack_lvl+0x201/0x2d8 [ 327.436394][T10548] ? show_regs_print_info+0x12/0x12 [ 327.441618][T10548] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 327.447391][T10548] ? save_stack+0x123/0x200 [ 327.452015][T10548] should_fail+0x384/0x4b0 [ 327.456462][T10548] prepare_alloc_pages+0x1db/0x5a0 [ 327.461655][T10548] __alloc_pages+0x161/0x580 [ 327.466275][T10548] ? __rmqueue_pcplist+0x2090/0x2090 [ 327.471724][T10548] ? rcu_read_lock_sched_held+0x89/0x130 [ 327.477348][T10548] ? kasan_unpoison+0x5d/0x80 [ 327.482019][T10548] ? __kasan_slab_alloc+0x67/0xf0 [ 327.487050][T10548] kmalloc_large_node+0x7c/0x180 [ 327.492001][T10548] __kmalloc_node+0x31c/0x420 [ 327.496676][T10548] kvmalloc_node+0x81/0x110 [ 327.501175][T10548] alloc_netdev_mqs+0x85/0xc40 [ 327.505930][T10548] ? ieee80211_if_setup_no_queue+0xf0/0xf0 [ 327.511735][T10548] ieee80211_if_add+0x1197/0x1df0 [ 327.516764][T10548] ieee80211_add_iface+0xd1/0x1d0 [ 327.521785][T10548] ? ieee80211_set_wakeup+0x100/0x100 [ 327.527158][T10548] nl80211_new_interface+0x600/0xc00 [ 327.532442][T10548] ? nl80211_set_interface+0x890/0x890 [ 327.537906][T10548] ? nl80211_pre_doit+0x4b7/0x5b0 [ 327.542949][T10548] genl_rcv_msg+0x1032/0x1480 [ 327.547630][T10548] ? genl_bind+0x360/0x360 [ 327.552049][T10548] ? __lock_acquire+0x1382/0x2b00 [ 327.557216][T10548] ? rcu_read_lock_sched_held+0x89/0x130 [ 327.562846][T10548] ? nl80211_set_interface+0x890/0x890 [ 327.568336][T10548] netlink_rcv_skb+0x200/0x470 [ 327.573122][T10548] ? genl_bind+0x360/0x360 [ 327.577536][T10548] ? netlink_ack+0xb70/0xb70 [ 327.582120][T10548] ? __down_read_common+0x1b0/0x450 [ 327.587317][T10548] ? up_read_non_owner+0x1c0/0x1c0 [ 327.592421][T10548] ? netlink_deliver_tap+0x130/0x880 [ 327.597713][T10548] genl_rcv+0x24/0x40 [ 327.601688][T10548] netlink_unicast+0x814/0x9f0 [ 327.606552][T10548] ? netlink_detachskb+0xa0/0xa0 [ 327.611508][T10548] ? __virt_addr_valid+0x21b/0x2d0 [ 327.616742][T10548] ? __phys_addr_symbol+0x2b/0x70 [ 327.621781][T10548] ? __check_object_size+0x2f3/0x3f0 [ 327.627065][T10548] ? bpf_lsm_netlink_send+0x5/0x10 [ 327.632211][T10548] netlink_sendmsg+0xaea/0xe60 [ 327.636975][T10548] ? memcpy+0x3c/0x60 [ 327.641075][T10548] ? netlink_getsockopt+0xa60/0xa60 [ 327.646305][T10548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 327.651590][T10548] ? security_socket_sendmsg+0x9d/0xb0 [ 327.657069][T10548] ? netlink_getsockopt+0xa60/0xa60 [ 327.662265][T10548] ____sys_sendmsg+0x5b9/0x910 [ 327.667558][T10548] ? __sys_sendmsg_sock+0x30/0x30 [ 327.672590][T10548] __sys_sendmsg+0x280/0x370 [ 327.677186][T10548] ? ____sys_sendmsg+0x910/0x910 [ 327.682127][T10548] ? __context_tracking_exit+0x7a/0xd0 [ 327.687587][T10548] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 327.693823][T10548] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 327.699819][T10548] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 327.705827][T10548] ? lockdep_hardirqs_on+0x95/0x140 [ 327.711024][T10548] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 327.717018][T10548] do_syscall_64+0x44/0xd0 [ 327.721443][T10548] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 327.727337][T10548] RIP: 0033:0x7f6dc5fade99 [ 327.731775][T10548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:48:09 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3], 0x48}}, 0x0) [ 327.751380][T10548] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.759790][T10548] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 327.767757][T10548] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 327.775728][T10548] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 327.783843][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.791813][T10548] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 327.799810][T10548] 06:48:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 12) 06:48:09 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 327.863895][T10551] netlink: 'syz-executor.4': attribute type 72 has an invalid length. 06:48:09 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) [ 327.941742][T10556] FAULT_INJECTION: forcing a failure. [ 327.941742][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 327.958456][T10560] netlink: 'syz-executor.3': attribute type 72 has an invalid length. 06:48:09 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc020660b, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 327.992277][T10556] CPU: 0 PID: 10556 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 328.001697][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.011785][T10556] Call Trace: [ 328.015079][T10556] [ 328.018032][T10556] dump_stack_lvl+0x201/0x2d8 [ 328.022733][T10556] ? show_regs_print_info+0x12/0x12 [ 328.027954][T10556] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 328.033717][T10556] ? __might_sleep+0xe0/0xe0 [ 328.038344][T10556] should_fail+0x384/0x4b0 06:48:09 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 328.042786][T10556] ? kvmalloc_node+0x81/0x110 [ 328.047489][T10556] should_failslab+0x5/0x20 [ 328.052011][T10556] __kmalloc_node+0x97/0x420 [ 328.056730][T10556] kvmalloc_node+0x81/0x110 [ 328.061269][T10556] alloc_netdev_mqs+0x600/0xc40 [ 328.066128][T10556] ? ieee80211_if_setup_no_queue+0xf0/0xf0 [ 328.071947][T10556] ieee80211_if_add+0x1197/0x1df0 [ 328.077018][T10556] ieee80211_add_iface+0xd1/0x1d0 [ 328.082152][T10556] ? ieee80211_set_wakeup+0x100/0x100 [ 328.087557][T10556] nl80211_new_interface+0x600/0xc00 [ 328.092864][T10556] ? nl80211_set_interface+0x890/0x890 [ 328.098320][T10556] ? nl80211_pre_doit+0x4b7/0x5b0 [ 328.103343][T10556] genl_rcv_msg+0x1032/0x1480 [ 328.108021][T10556] ? genl_bind+0x360/0x360 [ 328.112434][T10556] ? __lock_acquire+0x1382/0x2b00 [ 328.117469][T10556] ? rcu_read_lock_sched_held+0x89/0x130 [ 328.123090][T10556] ? nl80211_set_interface+0x890/0x890 [ 328.128549][T10556] netlink_rcv_skb+0x200/0x470 [ 328.133310][T10556] ? genl_bind+0x360/0x360 [ 328.137718][T10556] ? netlink_ack+0xb70/0xb70 [ 328.142359][T10556] ? __down_read_common+0x1b0/0x450 [ 328.147562][T10556] ? up_read_non_owner+0x1c0/0x1c0 [ 328.152677][T10556] ? netlink_deliver_tap+0x130/0x880 [ 328.157961][T10556] genl_rcv+0x24/0x40 [ 328.161942][T10556] netlink_unicast+0x814/0x9f0 [ 328.166748][T10556] ? netlink_detachskb+0xa0/0xa0 [ 328.171677][T10556] ? __virt_addr_valid+0x21b/0x2d0 [ 328.176778][T10556] ? __phys_addr_symbol+0x2b/0x70 [ 328.181795][T10556] ? __check_object_size+0x2f3/0x3f0 [ 328.187069][T10556] ? bpf_lsm_netlink_send+0x5/0x10 [ 328.192178][T10556] netlink_sendmsg+0xaea/0xe60 [ 328.196950][T10556] ? memcpy+0x3c/0x60 [ 328.200929][T10556] ? netlink_getsockopt+0xa60/0xa60 [ 328.206134][T10556] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.211423][T10556] ? security_socket_sendmsg+0x9d/0xb0 [ 328.216875][T10556] ? netlink_getsockopt+0xa60/0xa60 [ 328.222070][T10556] ____sys_sendmsg+0x5b9/0x910 [ 328.226831][T10556] ? __sys_sendmsg_sock+0x30/0x30 [ 328.231861][T10556] __sys_sendmsg+0x280/0x370 [ 328.236460][T10556] ? ____sys_sendmsg+0x910/0x910 [ 328.241391][T10556] ? __context_tracking_exit+0x7a/0xd0 [ 328.246871][T10556] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 328.252866][T10556] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 328.259106][T10556] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 328.265095][T10556] ? lockdep_hardirqs_on+0x95/0x140 [ 328.270289][T10556] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 328.276293][T10556] do_syscall_64+0x44/0xd0 [ 328.280721][T10556] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 328.286627][T10556] RIP: 0033:0x7f6dc5fade99 [ 328.291031][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 328.310806][T10556] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.319329][T10556] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 328.327319][T10556] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 328.335368][T10556] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 06:48:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 13) [ 328.343339][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.351472][T10556] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 328.359451][T10556] 06:48:09 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:48:09 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:09 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000800", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:09 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x2, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 328.521910][T10571] FAULT_INJECTION: forcing a failure. [ 328.521910][T10571] name failslab, interval 1, probability 0, space 0, times 0 [ 328.535575][T10572] netlink: 'syz-executor.4': attribute type 72 has an invalid length. [ 328.555741][T10571] CPU: 0 PID: 10571 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 06:48:09 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x4, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 328.564559][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.574641][T10571] Call Trace: [ 328.577951][T10571] [ 328.580913][T10571] dump_stack_lvl+0x201/0x2d8 [ 328.585621][T10571] ? show_regs_print_info+0x12/0x12 [ 328.590848][T10571] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 328.596743][T10571] ? __might_sleep+0xe0/0xe0 [ 328.601378][T10571] ? memset+0x1f/0x40 [ 328.605395][T10571] should_fail+0x384/0x4b0 [ 328.609840][T10571] ? kvmalloc_node+0x81/0x110 [ 328.614538][T10571] should_failslab+0x5/0x20 [ 328.619168][T10571] __kmalloc_node+0x97/0x420 [ 328.623888][T10571] kvmalloc_node+0x81/0x110 [ 328.628434][T10571] alloc_netdev_mqs+0x79a/0xc40 [ 328.633314][T10571] ieee80211_if_add+0x1197/0x1df0 [ 328.638379][T10571] ieee80211_add_iface+0xd1/0x1d0 [ 328.643424][T10571] ? ieee80211_set_wakeup+0x100/0x100 [ 328.648798][T10571] nl80211_new_interface+0x600/0xc00 [ 328.654081][T10571] ? nl80211_set_interface+0x890/0x890 [ 328.659534][T10571] ? nl80211_pre_doit+0x4b7/0x5b0 [ 328.664556][T10571] genl_rcv_msg+0x1032/0x1480 [ 328.669317][T10571] ? genl_bind+0x360/0x360 [ 328.673727][T10571] ? __lock_acquire+0x1382/0x2b00 [ 328.678755][T10571] ? rcu_read_lock_sched_held+0x89/0x130 [ 328.684381][T10571] ? nl80211_set_interface+0x890/0x890 [ 328.689843][T10571] netlink_rcv_skb+0x200/0x470 [ 328.694612][T10571] ? genl_bind+0x360/0x360 [ 328.699022][T10571] ? netlink_ack+0xb70/0xb70 [ 328.703598][T10571] ? __down_read_common+0x1b0/0x450 [ 328.708788][T10571] ? up_read_non_owner+0x1c0/0x1c0 [ 328.713892][T10571] ? netlink_deliver_tap+0x130/0x880 [ 328.719180][T10571] genl_rcv+0x24/0x40 [ 328.723153][T10571] netlink_unicast+0x814/0x9f0 [ 328.727920][T10571] ? netlink_detachskb+0xa0/0xa0 [ 328.732847][T10571] ? __virt_addr_valid+0x21b/0x2d0 [ 328.737955][T10571] ? __phys_addr_symbol+0x2b/0x70 [ 328.742967][T10571] ? __check_object_size+0x2f3/0x3f0 [ 328.748248][T10571] ? bpf_lsm_netlink_send+0x5/0x10 [ 328.753354][T10571] netlink_sendmsg+0xaea/0xe60 [ 328.758218][T10571] ? memcpy+0x3c/0x60 [ 328.762197][T10571] ? netlink_getsockopt+0xa60/0xa60 [ 328.767391][T10571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.772662][T10571] ? security_socket_sendmsg+0x9d/0xb0 [ 328.778112][T10571] ? netlink_getsockopt+0xa60/0xa60 [ 328.783301][T10571] ____sys_sendmsg+0x5b9/0x910 [ 328.788063][T10571] ? __sys_sendmsg_sock+0x30/0x30 [ 328.793087][T10571] __sys_sendmsg+0x280/0x370 [ 328.797670][T10571] ? ____sys_sendmsg+0x910/0x910 [ 328.802612][T10571] ? __context_tracking_exit+0x7a/0xd0 [ 328.808090][T10571] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 328.814062][T10571] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 328.820047][T10571] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 328.826022][T10571] ? lockdep_hardirqs_on+0x95/0x140 [ 328.831230][T10571] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 328.837200][T10571] do_syscall_64+0x44/0xd0 [ 328.841675][T10571] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 328.847563][T10571] RIP: 0033:0x7f6dc5fade99 [ 328.851991][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 328.871606][T10571] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.880075][T10571] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 328.888038][T10571] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 328.896002][T10571] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 [ 328.903970][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.911947][T10571] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 328.919938][T10571] 06:48:10 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:10 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 14) 06:48:10 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 06:48:10 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:10 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:10 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) 06:48:10 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 329.094789][T10586] FAULT_INJECTION: forcing a failure. [ 329.094789][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 329.144613][T10586] CPU: 1 PID: 10586 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 329.153425][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.163504][T10586] Call Trace: [ 329.166799][T10586] [ 329.169744][T10586] dump_stack_lvl+0x201/0x2d8 [ 329.174449][T10586] ? show_regs_print_info+0x12/0x12 [ 329.179671][T10586] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 329.185426][T10586] ? __might_sleep+0xe0/0xe0 [ 329.190038][T10586] ? memset+0x1f/0x40 [ 329.194049][T10586] should_fail+0x384/0x4b0 [ 329.198491][T10586] ? kvmalloc_node+0x81/0x110 [ 329.203191][T10586] should_failslab+0x5/0x20 [ 329.207714][T10586] __kmalloc_node+0x97/0x420 [ 329.212342][T10586] kvmalloc_node+0x81/0x110 [ 329.216875][T10586] alloc_netdev_mqs+0x79a/0xc40 [ 329.221765][T10586] ieee80211_if_add+0x1197/0x1df0 [ 329.226831][T10586] ieee80211_add_iface+0xd1/0x1d0 [ 329.231974][T10586] ? ieee80211_set_wakeup+0x100/0x100 [ 329.237410][T10586] nl80211_new_interface+0x600/0xc00 [ 329.242726][T10586] ? nl80211_set_interface+0x890/0x890 [ 329.248216][T10586] ? nl80211_pre_doit+0x4b7/0x5b0 [ 329.253279][T10586] genl_rcv_msg+0x1032/0x1480 [ 329.257994][T10586] ? genl_bind+0x360/0x360 [ 329.262451][T10586] ? __lock_acquire+0x1382/0x2b00 [ 329.267523][T10586] ? rcu_read_lock_sched_held+0x89/0x130 [ 329.273174][T10586] ? nl80211_set_interface+0x890/0x890 [ 329.278673][T10586] netlink_rcv_skb+0x200/0x470 [ 329.283464][T10586] ? genl_bind+0x360/0x360 [ 329.287900][T10586] ? netlink_ack+0xb70/0xb70 [ 329.292498][T10586] ? __down_read_common+0x1b0/0x450 [ 329.297701][T10586] ? up_read_non_owner+0x1c0/0x1c0 [ 329.302822][T10586] ? netlink_deliver_tap+0x130/0x880 [ 329.308112][T10586] genl_rcv+0x24/0x40 [ 329.312088][T10586] netlink_unicast+0x814/0x9f0 [ 329.316872][T10586] ? netlink_detachskb+0xa0/0xa0 [ 329.321830][T10586] ? __virt_addr_valid+0x21b/0x2d0 [ 329.326936][T10586] ? __phys_addr_symbol+0x2b/0x70 [ 329.331961][T10586] ? __check_object_size+0x2f3/0x3f0 [ 329.337598][T10586] ? bpf_lsm_netlink_send+0x5/0x10 [ 329.342713][T10586] netlink_sendmsg+0xaea/0xe60 [ 329.347497][T10586] ? memcpy+0x3c/0x60 [ 329.351476][T10586] ? netlink_getsockopt+0xa60/0xa60 [ 329.356673][T10586] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 329.361951][T10586] ? security_socket_sendmsg+0x9d/0xb0 [ 329.367410][T10586] ? netlink_getsockopt+0xa60/0xa60 [ 329.372623][T10586] ____sys_sendmsg+0x5b9/0x910 [ 329.377403][T10586] ? __sys_sendmsg_sock+0x30/0x30 [ 329.382436][T10586] __sys_sendmsg+0x280/0x370 [ 329.387018][T10586] ? ____sys_sendmsg+0x910/0x910 [ 329.391970][T10586] ? __context_tracking_exit+0x7a/0xd0 [ 329.397453][T10586] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 329.403424][T10586] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 329.409402][T10586] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 329.415469][T10586] ? lockdep_hardirqs_on+0x95/0x140 [ 329.420659][T10586] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 329.426634][T10586] do_syscall_64+0x44/0xd0 [ 329.431055][T10586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 329.436955][T10586] RIP: 0033:0x7f6dc5fade99 [ 329.441398][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 329.460996][T10586] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.469411][T10586] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 329.477405][T10586] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 329.485391][T10586] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 06:48:10 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:10 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x5, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:10 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) [ 329.493486][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.501454][T10586] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 329.509441][T10586] 06:48:10 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:10 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:11 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) (fail_nth: 15) 06:48:11 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:11 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x6, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:11 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:11 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x4, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) 06:48:11 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc001400040069"], 0x48}}, 0x0) [ 329.747808][T10606] FAULT_INJECTION: forcing a failure. [ 329.747808][T10606] name failslab, interval 1, probability 0, space 0, times 0 [ 329.802847][T10606] CPU: 1 PID: 10606 Comm: syz-executor.2 Not tainted 5.16.0-rc6-syzkaller #0 [ 329.811662][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.821736][T10606] Call Trace: [ 329.825031][T10606] [ 329.827974][T10606] dump_stack_lvl+0x201/0x2d8 [ 329.832677][T10606] ? show_regs_print_info+0x12/0x12 [ 329.837896][T10606] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 329.843650][T10606] should_fail+0x384/0x4b0 [ 329.848087][T10606] ? mesh_table_alloc+0x46/0x160 [ 329.853095][T10606] should_failslab+0x5/0x20 [ 329.857599][T10606] kmem_cache_alloc_trace+0x71/0x330 [ 329.862907][T10606] mesh_table_alloc+0x46/0x160 [ 329.867678][T10606] mesh_pathtbl_init+0x14/0xc0 [ 329.872446][T10606] ieee80211_mesh_init_sdata+0x2ee/0x530 [ 329.878083][T10606] ieee80211_setup_sdata+0x86f/0xda0 [ 329.883378][T10606] ieee80211_if_add+0xd5f/0x1df0 [ 329.888325][T10606] ieee80211_add_iface+0xd1/0x1d0 [ 329.893357][T10606] ? ieee80211_set_wakeup+0x100/0x100 [ 329.898738][T10606] nl80211_new_interface+0x600/0xc00 [ 329.904026][T10606] ? nl80211_set_interface+0x890/0x890 [ 329.909488][T10606] ? nl80211_pre_doit+0x4b7/0x5b0 [ 329.914516][T10606] genl_rcv_msg+0x1032/0x1480 [ 329.919213][T10606] ? genl_bind+0x360/0x360 [ 329.923634][T10606] ? __lock_acquire+0x1382/0x2b00 [ 329.928683][T10606] ? rcu_read_lock_sched_held+0x89/0x130 [ 329.934333][T10606] ? nl80211_set_interface+0x890/0x890 [ 329.939812][T10606] netlink_rcv_skb+0x200/0x470 [ 329.944596][T10606] ? genl_bind+0x360/0x360 [ 329.949011][T10606] ? netlink_ack+0xb70/0xb70 [ 329.953602][T10606] ? __down_read_common+0x1b0/0x450 [ 329.958812][T10606] ? up_read_non_owner+0x1c0/0x1c0 [ 329.963926][T10606] ? netlink_deliver_tap+0x130/0x880 [ 329.969266][T10606] genl_rcv+0x24/0x40 [ 329.973275][T10606] netlink_unicast+0x814/0x9f0 [ 329.978066][T10606] ? netlink_detachskb+0xa0/0xa0 [ 329.983035][T10606] ? __virt_addr_valid+0x21b/0x2d0 [ 329.988152][T10606] ? __phys_addr_symbol+0x2b/0x70 [ 329.993201][T10606] ? __check_object_size+0x2f3/0x3f0 [ 329.998497][T10606] ? bpf_lsm_netlink_send+0x5/0x10 [ 330.003623][T10606] netlink_sendmsg+0xaea/0xe60 [ 330.008528][T10606] ? memcpy+0x3c/0x60 [ 330.012538][T10606] ? netlink_getsockopt+0xa60/0xa60 [ 330.017839][T10606] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.023219][T10606] ? security_socket_sendmsg+0x9d/0xb0 [ 330.028690][T10606] ? netlink_getsockopt+0xa60/0xa60 [ 330.033896][T10606] ____sys_sendmsg+0x5b9/0x910 [ 330.038673][T10606] ? __sys_sendmsg_sock+0x30/0x30 [ 330.043718][T10606] __sys_sendmsg+0x280/0x370 [ 330.048311][T10606] ? ____sys_sendmsg+0x910/0x910 [ 330.053279][T10606] ? __context_tracking_exit+0x7a/0xd0 [ 330.058749][T10606] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 330.064727][T10606] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 330.070712][T10606] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 330.076691][T10606] ? lockdep_hardirqs_on+0x95/0x140 [ 330.081886][T10606] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 330.087964][T10606] do_syscall_64+0x44/0xd0 [ 330.092425][T10606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 330.098339][T10606] RIP: 0033:0x7f6dc5fade99 [ 330.102760][T10606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 330.122361][T10606] RSP: 002b:00007f6dc4923168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.130770][T10606] RAX: ffffffffffffffda RBX: 00007f6dc60c0f60 RCX: 00007f6dc5fade99 [ 330.138737][T10606] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005 [ 330.146703][T10606] RBP: 00007f6dc49231d0 R08: 0000000000000000 R09: 0000000000000000 06:48:11 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:11 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 330.154673][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.162643][T10606] R13: 00007fff873daf7f R14: 00007f6dc4923300 R15: 0000000000022000 [ 330.170629][T10606] 06:48:11 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f"], 0x48}}, 0x0) 06:48:11 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) 06:48:11 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x11, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c00994000000000000000000400cc00140004006970365f7474693000006f281e3000000800050007"], 0x48}}, 0x0) [ 330.313916][T10619] __nla_validate_parse: 17 callbacks suppressed [ 330.313934][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:48:11 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x7, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xffffffffa0020000}]}) [ 330.395308][ T7] ================================================================== [ 330.403694][ T7] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x18c/0xbb0 [ 330.411423][ T7] Write of size 8 at addr 0000000000000088 by task kworker/0:1/7 [ 330.419178][ T7] [ 330.421526][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.16.0-rc6-syzkaller #0 [ 330.429690][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.439761][ T7] Workqueue: events cfg80211_destroy_iface_wk [ 330.445854][ T7] Call Trace: [ 330.449153][ T7] [ 330.452093][ T7] dump_stack_lvl+0x1dc/0x2d8 [ 330.456768][ T7] ? show_regs_print_info+0x12/0x12 [ 330.461982][ T7] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 330.467711][ T7] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 330.473185][ T7] ? stack_trace_save+0x1e0/0x1e0 [ 330.478343][ T7] ? arch_stack_walk+0x112/0x140 [ 330.483376][ T7] ? try_to_grab_pending+0x18c/0xbb0 [ 330.488686][ T7] kasan_report+0x190/0x1f0 [ 330.493264][ T7] ? try_to_grab_pending+0x18c/0xbb0 [ 330.498585][ T7] kasan_check_range+0x2b5/0x2f0 [ 330.503547][ T7] try_to_grab_pending+0x18c/0xbb0 [ 330.508685][ T7] ? kfree+0xe1/0x330 [ 330.512683][ T7] ? mod_delayed_work_on+0x250/0x250 [ 330.517987][ T7] ? kasan_set_track+0x68/0x80 [ 330.522853][ T7] ? kasan_set_track+0x4c/0x80 [ 330.527638][ T7] ? kasan_set_free_info+0x1f/0x40 [ 330.532768][ T7] ? ____kasan_slab_free+0x10d/0x150 [ 330.538078][ T7] ? slab_free_freelist_hook+0x12e/0x1a0 [ 330.543728][ T7] ? ieee80211_mesh_teardown_sdata+0x2f0/0x330 [ 330.549896][ T7] ? unregister_netdevice_many+0x138e/0x19e0 [ 330.556135][ T7] ? unregister_netdevice_queue+0x2e6/0x350 [ 330.562044][ T7] ? ieee80211_if_remove+0x1cc/0x2c0 [ 330.567352][ T7] ? ieee80211_del_iface+0x12/0x20 [ 330.572589][ T7] ? cfg80211_destroy_ifaces+0x294/0x340 [ 330.578238][ T7] ? cfg80211_destroy_iface_wk+0x1d/0x30 [ 330.583898][ T7] __cancel_work_timer+0x14c/0x710 [ 330.589214][ T7] ? cancel_work_sync+0x20/0x20 [ 330.594096][ T7] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 330.600098][ T7] ? print_irqtrace_events+0x220/0x220 [ 330.605595][ T7] ? kasan_quarantine_put+0xd4/0x230 [ 330.610901][ T7] ? lockdep_hardirqs_on+0x95/0x140 [ 330.616129][ T7] ? slab_free_freelist_hook+0x12e/0x1a0 [ 330.621784][ T7] ? ieee80211_mesh_teardown_sdata+0x2f0/0x330 [ 330.627963][ T7] ? mesh_path_free_rcu+0x400/0x400 [ 330.633179][ T7] rhashtable_free_and_destroy+0x27/0x8c0 [ 330.638934][ T7] mesh_pathtbl_unregister+0x4b/0xa0 [ 330.644237][ T7] ? trace_drv_return_void+0x260/0x260 [ 330.649715][ T7] unregister_netdevice_many+0x138e/0x19e0 [ 330.655558][ T7] ? alloc_netdev_mqs+0xc40/0xc40 [ 330.660612][ T7] ? __kernfs_remove+0xf52/0x1040 [ 330.665725][ T7] unregister_netdevice_queue+0x2e6/0x350 [ 330.671487][ T7] ? __up_read+0x790/0x790 [ 330.675944][ T7] ? list_netdevice+0x450/0x450 [ 330.680828][ T7] _cfg80211_unregister_wdev+0x17b/0x5b0 [ 330.686485][ T7] ieee80211_if_remove+0x1cc/0x2c0 [ 330.691627][ T7] ieee80211_del_iface+0x12/0x20 [ 330.696586][ T7] cfg80211_destroy_ifaces+0x294/0x340 [ 330.702089][ T7] cfg80211_destroy_iface_wk+0x1d/0x30 [ 330.707578][ T7] process_one_work+0x853/0x1140 [ 330.712543][ T7] ? worker_detach_from_pool+0x260/0x260 [ 330.718519][ T7] ? _raw_spin_lock_irqsave+0x120/0x120 [ 330.724065][ T7] ? kthread_data+0x4d/0xc0 [ 330.728625][ T7] ? wq_worker_running+0x8b/0x140 [ 330.733660][ T7] worker_thread+0xac1/0x1320 [ 330.738352][ T7] kthread+0x468/0x490 [ 330.742428][ T7] ? rcu_lock_release+0x20/0x20 [ 330.747289][ T7] ? kthread_blkcg+0xd0/0xd0 [ 330.751897][ T7] ret_from_fork+0x1f/0x30 [ 330.756438][ T7] [ 330.759461][ T7] ================================================================== [ 330.767653][ T7] Disabling lock debugging due to kernel taint [ 330.773809][ T7] Kernel panic - not syncing: panic_on_warn set ... [ 330.780380][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Tainted: G B 5.16.0-rc6-syzkaller #0 [ 330.789903][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.799942][ T7] Workqueue: events cfg80211_destroy_iface_wk [ 330.806002][ T7] Call Trace: [ 330.809268][ T7] [ 330.812190][ T7] dump_stack_lvl+0x1dc/0x2d8 [ 330.816940][ T7] ? show_regs_print_info+0x12/0x12 [ 330.822126][ T7] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 330.827832][ T7] panic+0x2d6/0x810 [ 330.831790][ T7] ? nmi_panic+0x90/0x90 [ 330.836057][ T7] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 330.842051][ T7] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 330.847499][ T7] ? stack_trace_save+0x1e0/0x1e0 [ 330.852518][ T7] ? try_to_grab_pending+0x18c/0xbb0 [ 330.857792][ T7] end_report+0x83/0x90 [ 330.861939][ T7] kasan_report+0x1bf/0x1f0 [ 330.866540][ T7] ? try_to_grab_pending+0x18c/0xbb0 [ 330.871817][ T7] kasan_check_range+0x2b5/0x2f0 [ 330.876752][ T7] try_to_grab_pending+0x18c/0xbb0 [ 330.881892][ T7] ? kfree+0xe1/0x330 [ 330.885866][ T7] ? mod_delayed_work_on+0x250/0x250 [ 330.891138][ T7] ? kasan_set_track+0x68/0x80 [ 330.895886][ T7] ? kasan_set_track+0x4c/0x80 [ 330.900636][ T7] ? kasan_set_free_info+0x1f/0x40 [ 330.905755][ T7] ? ____kasan_slab_free+0x10d/0x150 [ 330.911147][ T7] ? slab_free_freelist_hook+0x12e/0x1a0 [ 330.916778][ T7] ? ieee80211_mesh_teardown_sdata+0x2f0/0x330 [ 330.922918][ T7] ? unregister_netdevice_many+0x138e/0x19e0 [ 330.928895][ T7] ? unregister_netdevice_queue+0x2e6/0x350 [ 330.934783][ T7] ? ieee80211_if_remove+0x1cc/0x2c0 [ 330.940061][ T7] ? ieee80211_del_iface+0x12/0x20 [ 330.945158][ T7] ? cfg80211_destroy_ifaces+0x294/0x340 [ 330.950777][ T7] ? cfg80211_destroy_iface_wk+0x1d/0x30 [ 330.956401][ T7] __cancel_work_timer+0x14c/0x710 [ 330.961762][ T7] ? cancel_work_sync+0x20/0x20 [ 330.966603][ T7] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 330.972593][ T7] ? print_irqtrace_events+0x220/0x220 [ 330.978174][ T7] ? kasan_quarantine_put+0xd4/0x230 [ 330.983458][ T7] ? lockdep_hardirqs_on+0x95/0x140 [ 330.988720][ T7] ? slab_free_freelist_hook+0x12e/0x1a0 [ 330.994337][ T7] ? ieee80211_mesh_teardown_sdata+0x2f0/0x330 [ 331.000475][ T7] ? mesh_path_free_rcu+0x400/0x400 [ 331.005659][ T7] rhashtable_free_and_destroy+0x27/0x8c0 [ 331.011375][ T7] mesh_pathtbl_unregister+0x4b/0xa0 [ 331.016719][ T7] ? trace_drv_return_void+0x260/0x260 [ 331.022170][ T7] unregister_netdevice_many+0x138e/0x19e0 [ 331.027968][ T7] ? alloc_netdev_mqs+0xc40/0xc40 [ 331.032982][ T7] ? __kernfs_remove+0xf52/0x1040 [ 331.037991][ T7] unregister_netdevice_queue+0x2e6/0x350 [ 331.043704][ T7] ? __up_read+0x790/0x790 [ 331.048123][ T7] ? list_netdevice+0x450/0x450 [ 331.052968][ T7] _cfg80211_unregister_wdev+0x17b/0x5b0 [ 331.058600][ T7] ieee80211_if_remove+0x1cc/0x2c0 [ 331.063697][ T7] ieee80211_del_iface+0x12/0x20 [ 331.068617][ T7] cfg80211_destroy_ifaces+0x294/0x340 [ 331.074067][ T7] cfg80211_destroy_iface_wk+0x1d/0x30 [ 331.079515][ T7] process_one_work+0x853/0x1140 [ 331.084440][ T7] ? worker_detach_from_pool+0x260/0x260 [ 331.090059][ T7] ? _raw_spin_lock_irqsave+0x120/0x120 [ 331.095588][ T7] ? kthread_data+0x4d/0xc0 [ 331.100071][ T7] ? wq_worker_running+0x8b/0x140 [ 331.105076][ T7] worker_thread+0xac1/0x1320 [ 331.109744][ T7] kthread+0x468/0x490 [ 331.113793][ T7] ? rcu_lock_release+0x20/0x20 [ 331.118621][ T7] ? kthread_blkcg+0xd0/0xd0 [ 331.123206][ T7] ret_from_fork+0x1f/0x30 [ 331.127608][ T7] [ 331.130924][ T7] Kernel Offset: disabled [ 331.135242][ T7] Rebooting in 86400 seconds..