00)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={r6}) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x2020) [ 215.667833] audit: type=1804 audit(1603162327.691:44): pid=10120 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/18/bus/file0" dev="overlay" ino=15974 res=1 02:52:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) 02:52:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:07 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0xf8da, 0x6}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x7bf6}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 02:52:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) [ 215.879091] audit: type=1804 audit(1603162327.901:45): pid=10150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/19/bus/file0" dev="sda1" ino=15949 res=1 [ 215.915483] audit: type=1804 audit(1603162327.931:46): pid=10150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/19/bus/file0" dev="sda1" ino=15949 res=1 02:52:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x40000, 0x0, 0x3, 0x4, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) sendto$llc(r0, &(0x7f0000000080)="43cc5418f73958d5daf63a60906930b3bfcc40ec0650ae174a7c31f7715b0f3ec92101378ea7748277f152beaa8c9c50c088ed516b3621028b0bd89857bffb7e495128be992ce1f79b6d21b500db933b6db01444de56d6a6d6dbe9f00e28fafb0c0141bea2a7ba8993b64485c730ce605d311b975f3c", 0x76, 0x200084c0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000050700007a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800a0005003cfa86f0939b4b12040934827bdf4d54e2a9a8a3fdce5b62e4435911c8fa2de8559fb42cb5bdf3409fcfd350a9e3bf0171c0555e515a21d84d9493b027858ef379a52f70b0272a5614a63064533595a09fa4663e14f0f720091d"], 0x40}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) read(r2, &(0x7f0000000000)=""/10, 0xa) 02:52:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) 02:52:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={r6}) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 216.501052] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 02:52:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 216.529685] audit: type=1804 audit(1603162328.551:47): pid=10173 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/20/bus/file0" dev="sda1" ino=15993 res=1 02:52:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={r6}) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 216.641555] audit: type=1804 audit(1603162328.581:48): pid=10173 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/20/bus/file0" dev="sda1" ino=15993 res=1 02:52:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) 02:52:08 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00720332ff18df785ac2ea91bc000000000000540000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64"], 0x4c}}, 0x0) socket(0x10, 0xa, 0x4f67) r0 = socket(0x10, 0x3, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='@-(&^\x8d-(\x00', &(0x7f0000000200)=']-)\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='&&}+[\xc4--\x00', &(0x7f00000002c0)='.)$+.^%%!\x00', &(0x7f0000000300)='-\'\x00', &(0x7f0000000340)='[:\x00', &(0x7f0000000380)='\x00']) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipmr_delroute={0x2c, 0x19, 0x200, 0x70bd29, 0x25dfdbfc, {0x80, 0x14, 0x14, 0xf8, 0xff, 0x0, 0xfd, 0xe}, [@RTA_FLOW={0x8, 0xb, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x41) 02:52:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 216.757425] audit: type=1804 audit(1603162328.751:49): pid=10185 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/21/bus/file0" dev="sda1" ino=15974 res=1 02:52:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r6}) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8000, 0xfff, 0x4}, &(0x7f0000000080)=0x10) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x1}, 0x16, 0x1) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 02:52:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) 02:52:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xd811) 02:52:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000380), 0x0, 0x40, 0x80000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0x9, r2, 0x0) sched_getscheduler(r3) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004010) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x2) close(r4) r5 = open(&(0x7f00000001c0)='./bus/file0\x00', 0x46043, 0x0) sendfile(r4, r5, 0x0, 0x200fff) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 02:52:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5}) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xd811) 02:52:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) 02:52:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8000, 0xfff, 0x4}, &(0x7f0000000080)=0x10) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x1}, 0x16, 0x1) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 02:52:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x10, r0, 0x0) 02:52:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xd811) 02:52:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x10, r0, 0x0) 02:52:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xd811) 02:52:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r2) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xd811) 02:52:10 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x150, 0x0, 0x0, 0x0, 0x7fff, 0x9, 0xc5e, 0x4], 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:52:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x10, r0, 0x0) 02:52:10 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5}) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xd811) 02:52:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, 0xffffffffffffffff, 0x0) 02:52:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x0) 02:52:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, 0xffffffffffffffff, 0x0) 02:52:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x0) 02:52:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, 0xffffffffffffffff, 0x0) 02:52:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x0) 02:52:11 executing program 0: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x400, &(0x7f0000000040)) r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='vfat\x00', r0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="8c", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='vfat\x00', r1) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="8c", 0x1, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180), &(0x7f0000000340)=0x0, &(0x7f0000000380)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="8c", 0x1, r4) keyctl$chown(0xc, r4, r3, r2) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 02:52:11 executing program 5: sendto$netrom(0xffffffffffffffff, &(0x7f0000000040)="ef7e2a9c22b4c682dfa3e24d", 0xc, 0x4000000, &(0x7f0000000140)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r2, r0, &(0x7f00000000c0), 0x19) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x1, 0x1, 0x8, 0x0, 0x6}, 0x8, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0xffffffff80000000, 0x7, 0xfffffffffffffffe, 0x5}) syz_mount_image$vfat(&(0x7f00000009c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='slower,\x00'/17]) 02:52:11 executing program 4 (fault-call:6 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:11 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:11 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 219.098148] FAULT_INJECTION: forcing a failure. [ 219.098148] name failslab, interval 1, probability 0, space 0, times 1 [ 219.122371] FAT-fs (loop5): Unrecognized mount option "slower" or missing value [ 219.146090] FAULT_INJECTION: forcing a failure. [ 219.146090] name failslab, interval 1, probability 0, space 0, times 1 [ 219.150558] kauditd_printk_skb: 8 callbacks suppressed [ 219.150570] audit: type=1804 audit(1603162331.171:58): pid=10301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/28/bus/file0" dev="overlay" ino=16033 res=1 [ 219.163052] CPU: 1 PID: 10302 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 219.198602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.208915] Call Trace: [ 219.211540] dump_stack+0x22c/0x33e [ 219.215277] should_fail.cold+0xa/0x2f [ 219.219174] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 219.224287] ? lock_acquire+0x170/0x3f0 [ 219.228275] __should_failslab+0x153/0x1b6 [ 219.232528] should_failslab+0x5/0xf [ 219.236250] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 219.240931] ? file_has_perm+0x23f/0x330 [ 219.245004] alloc_pipe_info+0xed/0x4a0 [ 219.248988] splice_direct_to_actor+0x6dd/0x8d0 [ 219.253668] ? page_cache_pipe_buf_release+0x280/0x280 [ 219.258951] ? selinux_file_permission+0xc1/0x5a0 [ 219.263798] ? do_splice_to+0x160/0x160 [ 219.267776] ? security_file_permission+0x1c0/0x230 [ 219.272796] do_splice_direct+0x1a7/0x270 [ 219.276938] ? splice_direct_to_actor+0x8d0/0x8d0 [ 219.281787] ? security_file_permission+0x1c0/0x230 [ 219.286814] do_sendfile+0x550/0xc30 [ 219.290543] ? do_compat_pwritev64+0x1b0/0x1b0 [ 219.295137] ? vfs_write+0x393/0x540 02:52:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r0, 0xee00, r3}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000008187caea68dc18bd5eea4c1048d6a52b717c705d9fda3c347e29893a48a71daa9bb4d094a248edbebc9568f02a7ea243a0057aa99e5f026b9d21bd09c0770fd41f1"], 0x14}}, 0x20004) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f00000003c0)) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x9}) delete_module(&(0x7f00000001c0)='\x00', 0x200) [ 219.298858] __se_sys_sendfile64+0x147/0x160 [ 219.303261] ? __se_sys_sendfile+0x180/0x180 [ 219.307671] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 219.313041] ? trace_hardirqs_off_caller+0x6e/0x210 [ 219.318060] ? do_syscall_64+0x21/0x670 [ 219.322211] do_syscall_64+0xf9/0x670 [ 219.326019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.331205] RIP: 0033:0x45de59 02:52:11 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e000004000280"], 0x34}}, 0x0) [ 219.334392] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.353298] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.361011] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 219.368376] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 219.375650] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 219.383011] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000000 [ 219.390282] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c [ 219.417412] CPU: 0 PID: 10300 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 219.425322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.434678] Call Trace: [ 219.437284] dump_stack+0x22c/0x33e [ 219.438419] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.440921] should_fail.cold+0xa/0x2f [ 219.453405] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 219.458528] __should_failslab+0x153/0x1b6 [ 219.462776] should_failslab+0x5/0xf [ 219.466499] kmem_cache_alloc+0x2b1/0x4a0 [ 219.470655] vm_area_dup+0x1c/0x170 [ 219.474283] __split_vma+0xa5/0x550 [ 219.477915] do_munmap+0x2f0/0xe10 [ 219.481461] ? lock_downgrade+0x750/0x750 [ 219.485608] ? mark_held_locks+0xf0/0xf0 [ 219.489671] ? may_expand_vm+0xe1/0x4c0 [ 219.493654] mmap_region+0x1f1/0x1510 [ 219.497455] ? cap_mmap_addr+0x50/0x350 [ 219.501507] ? vm_brk+0x20/0x20 [ 219.504793] ? security_mmap_addr+0x73/0x90 [ 219.509102] ? get_unmapped_area+0x296/0x3b0 [ 219.513495] do_mmap+0x8e8/0x1080 [ 219.516940] vm_mmap_pgoff+0x197/0x200 [ 219.520821] ? vma_is_stack_for_current+0xc0/0xc0 [ 219.525647] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 219.529872] ksys_mmap_pgoff+0x2d1/0x660 [ 219.533927] ? find_mergeable_anon_vma+0x260/0x260 [ 219.538860] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 219.544209] ? trace_hardirqs_off_caller+0x6e/0x210 [ 219.549211] ? do_syscall_64+0x21/0x670 [ 219.553179] do_syscall_64+0xf9/0x670 [ 219.556965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.562146] RIP: 0033:0x45de59 [ 219.565323] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.584303] RSP: 002b:00007fbd9a04ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.592082] RAX: ffffffffffffffda RBX: 0000000000021200 RCX: 000000000045de59 [ 219.599343] RDX: 000000000000001a RSI: 0000000000010000 RDI: 0000000020ff0000 [ 219.606596] RBP: 00007fbd9a04aca0 R08: 0000000000000003 R09: 0000000000000000 02:52:11 executing program 0: perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xff, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x50, 0x0, 0xfffffffb, 0x0, 0x2000000000000000, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffd0f, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872d2bf1000000", @ANYRESOCT, @ANYBLOB="ff7f000000000000140012800a00019137de69616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x4000000}, 0x20004015) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 02:52:11 executing program 4 (fault-call:6 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 219.613845] R10: 0000000000013012 R11: 0000000000000246 R12: 0000000000000000 [ 219.621095] R13: 00007ffe0c27031f R14: 00007fbd9a04b9c0 R15: 000000000118bf2c [ 219.660626] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:52:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) dup(0xffffffffffffffff) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x14, 0x4}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0002000000000000000000000000fbff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x5, 0x2, 0x20}) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xd) [ 219.710545] FAULT_INJECTION: forcing a failure. [ 219.710545] name failslab, interval 1, probability 0, space 0, times 0 [ 219.738191] CPU: 1 PID: 10323 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 219.746128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.755480] Call Trace: [ 219.758510] dump_stack+0x22c/0x33e [ 219.762158] should_fail.cold+0xa/0x2f [ 219.766055] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 219.771182] ? lock_acquire+0x170/0x3f0 [ 219.775176] __should_failslab+0x153/0x1b6 [ 219.779417] should_failslab+0x5/0xf [ 219.783136] __kmalloc+0x2dd/0x4f0 [ 219.786679] ? alloc_pipe_info+0x1c8/0x4a0 [ 219.790953] ? file_has_perm+0x23f/0x330 [ 219.795024] alloc_pipe_info+0x1c8/0x4a0 [ 219.799093] splice_direct_to_actor+0x6dd/0x8d0 [ 219.803774] ? page_cache_pipe_buf_release+0x280/0x280 [ 219.809058] ? selinux_file_permission+0xc1/0x5a0 [ 219.813906] ? do_splice_to+0x160/0x160 [ 219.817883] ? security_file_permission+0x1c0/0x230 [ 219.822910] do_splice_direct+0x1a7/0x270 [ 219.827073] ? splice_direct_to_actor+0x8d0/0x8d0 [ 219.831932] ? security_file_permission+0x1c0/0x230 [ 219.836958] do_sendfile+0x550/0xc30 [ 219.840718] ? do_compat_pwritev64+0x1b0/0x1b0 [ 219.845310] ? vfs_write+0x393/0x540 [ 219.849043] __se_sys_sendfile64+0x147/0x160 [ 219.853460] ? __se_sys_sendfile+0x180/0x180 [ 219.857876] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 219.863247] ? trace_hardirqs_off_caller+0x6e/0x210 [ 219.868269] ? do_syscall_64+0x21/0x670 [ 219.872256] do_syscall_64+0xf9/0x670 [ 219.876067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.881258] RIP: 0033:0x45de59 [ 219.884489] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.903392] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.911106] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 219.918377] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 219.925651] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 219.932921] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000001 [ 219.940195] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c [ 219.969583] audit: type=1804 audit(1603162331.991:59): pid=10325 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/29/bus/file0" dev="overlay" ino=16033 res=1 02:52:12 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 220.148029] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.206851] audit: type=1804 audit(1603162332.231:60): pid=10337 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/30/bus/file0" dev="overlay" ino=16027 res=1 02:52:12 executing program 0: getpeername$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/233, 0xffbe) bind(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x2, @dev={[], 0x2b}, 'syzkaller1\x00'}}, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r0 = socket$inet6(0xa, 0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/bnep\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r2, 0x0, 0x88002) clock_gettime(0x3, &(0x7f0000000180)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0xa4901, 0x0) ioctl$CHAR_RAW_ROGET(r3, 0x125e, &(0x7f0000000480)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 02:52:12 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:12 executing program 4 (fault-call:6 fault-nth:2): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 220.436061] overlayfs: failed to resolve './file0': -2 [ 220.470732] audit: type=1804 audit(1603162332.491:61): pid=10345 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/31/bus/file0" dev="sda1" ino=16031 res=1 [ 220.472700] FAULT_INJECTION: forcing a failure. [ 220.472700] name failslab, interval 1, probability 0, space 0, times 0 [ 220.570732] audit: type=1804 audit(1603162332.531:62): pid=10345 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/31/bus/file0" dev="sda1" ino=16031 res=1 [ 220.607185] CPU: 1 PID: 10351 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 220.615098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.624453] Call Trace: [ 220.627052] dump_stack+0x22c/0x33e [ 220.630689] should_fail.cold+0xa/0x2f [ 220.634584] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 220.639692] ? lock_acquire+0x170/0x3f0 [ 220.643732] __should_failslab+0x153/0x1b6 [ 220.647973] should_failslab+0x5/0xf [ 220.651690] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 220.656807] __kmalloc_node+0x38/0x70 [ 220.660614] kvmalloc_node+0x61/0xf0 [ 220.664334] iov_iter_get_pages_alloc+0x562/0x1170 [ 220.669272] ? kernel_text_address+0xbd/0xf0 [ 220.673686] ? __kernel_text_address+0x9/0x30 [ 220.678188] ? unwind_get_return_address+0x51/0x90 [ 220.683130] ? iov_iter_bvec+0x130/0x130 [ 220.687199] ? iov_iter_pipe+0xb4/0x2d0 [ 220.691182] default_file_splice_read+0x191/0xa10 [ 220.696031] ? kasan_kmalloc+0x139/0x160 [ 220.700104] ? alloc_pipe_info+0x1c8/0x4a0 [ 220.704341] ? splice_direct_to_actor+0x6dd/0x8d0 [ 220.709273] ? do_splice_direct+0x1a7/0x270 [ 220.713621] ? do_splice_direct+0x270/0x270 [ 220.717944] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.723312] ? lock_downgrade+0x750/0x750 [ 220.727473] ? mark_held_locks+0xf0/0xf0 [ 220.731547] ? mark_held_locks+0xf0/0xf0 [ 220.735612] ? check_preemption_disabled+0x41/0x2b0 [ 220.740633] ? avc_has_perm+0x25f/0x450 [ 220.744611] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 220.749280] ? fsnotify+0x99c/0xd80 [ 220.752909] ? __fsnotify_parent+0xd1/0x31c [ 220.757248] ? fsnotify_first_mark+0x240/0x240 [ 220.761835] ? __inode_security_revalidate+0xef/0x140 [ 220.767029] ? avc_policy_seqno+0x9/0x70 [ 220.771095] ? selinux_file_permission+0xc1/0x5a0 [ 220.775945] ? security_file_permission+0x1c0/0x230 [ 220.780975] ? do_splice_direct+0x270/0x270 [ 220.785300] do_splice_to+0x10e/0x160 [ 220.789105] splice_direct_to_actor+0x2b9/0x8d0 [ 220.793781] ? page_cache_pipe_buf_release+0x280/0x280 [ 220.799066] ? do_splice_to+0x160/0x160 [ 220.803053] do_splice_direct+0x1a7/0x270 [ 220.807206] ? splice_direct_to_actor+0x8d0/0x8d0 [ 220.812063] ? security_file_permission+0x1c0/0x230 [ 220.817091] do_sendfile+0x550/0xc30 [ 220.820815] ? do_compat_pwritev64+0x1b0/0x1b0 [ 220.825401] ? vfs_write+0x393/0x540 [ 220.829124] __se_sys_sendfile64+0x147/0x160 [ 220.833533] ? __se_sys_sendfile+0x180/0x180 [ 220.837947] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 220.843314] ? trace_hardirqs_off_caller+0x6e/0x210 [ 220.848339] ? do_syscall_64+0x21/0x670 [ 220.852324] do_syscall_64+0xf9/0x670 [ 220.856131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.861403] RIP: 0033:0x45de59 [ 220.864597] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.883499] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 220.891214] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 220.898486] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 220.905757] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 220.913035] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000002 02:52:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:13 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000002000)='./file0/file0\x00', 0x20) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004280)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000004380)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x18, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r6 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r6, 0x401070cd, 0x750000) 02:52:13 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x75, 0x5, 0x9, 0x0, 0x0, 0xd10000, 0xa200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x3400, 0x7, 0x10001, 0x6, 0xc1, 0xe74, 0x1}, 0xffffffffffffffff, 0x6, r2, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0xc, 0x1, {0xffffffff, @struct={0x7, 0x5e4}, 0x0, 0x0, 0x1, 0xfff, 0x5, 0x96d8, 0x1, @struct={0x20}, 0xfffffffb, 0xff, [0x3, 0x6, 0x6, 0xaeb9, 0x7, 0xffffffff80000000]}, {0x8001, @usage=0x100000000, 0x0, 0xfffffffffffffffa, 0x2, 0x4, 0x3, 0x8001, 0x18, @struct={0x982b, 0x2}, 0x1, 0x7, [0x7, 0x5, 0x1, 0x100000001, 0x7, 0x1]}, {0x5, @usage=0x3, 0x0, 0x2, 0x1, 0x3, 0x7fffffff, 0x6, 0x470, @struct={0x4, 0x4}, 0xffffffff, 0x2, [0xffffffffffffffff, 0x100000000, 0x8, 0x6, 0xfff, 0x82]}, {0xccc0, 0x8, 0x8}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000640)={r4, 0xffffffffffffff8e, 0x3f}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000a40)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000ac0)={r5, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 02:52:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) dup(0xffffffffffffffff) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x14, 0x4}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0002000000000000000000000000fbff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x5, 0x2, 0x20}) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xd) 02:52:13 executing program 4 (fault-call:6 fault-nth:3): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 220.920315] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c [ 221.020238] FAULT_INJECTION: forcing a failure. [ 221.020238] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 221.033022] overlayfs: failed to resolve './file0': -2 [ 221.085597] audit: type=1804 audit(1603162333.111:63): pid=10368 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/32/bus/file0" dev="sda1" ino=16057 res=1 [ 221.136500] CPU: 0 PID: 10369 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 221.144405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.151368] audit: type=1804 audit(1603162333.131:64): pid=10368 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/32/bus/file0" dev="sda1" ino=16057 res=1 [ 221.153752] Call Trace: [ 221.153775] dump_stack+0x22c/0x33e [ 221.153797] should_fail.cold+0xa/0x2f [ 221.153813] ? lock_acquire+0x170/0x3f0 [ 221.153828] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 221.153852] __alloc_pages_nodemask+0x256/0x2a60 [ 221.153866] ? kasan_kmalloc+0x139/0x160 [ 221.153882] ? __kmalloc_node+0x4c/0x70 [ 221.153895] ? kvmalloc_node+0x61/0xf0 [ 221.153905] ? iov_iter_get_pages_alloc+0x562/0x1170 [ 221.153918] ? default_file_splice_read+0x191/0xa10 [ 221.153930] ? do_splice_to+0x10e/0x160 [ 221.153943] ? do_sendfile+0x550/0xc30 [ 221.153956] ? __se_sys_sendfile64+0x147/0x160 [ 221.153969] ? do_syscall_64+0xf9/0x670 [ 221.153985] ? static_obj+0x50/0x50 [ 221.154000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 221.154017] ? deref_stack_reg+0x134/0x1d0 [ 221.154034] ? should_fail+0x142/0x7d8 [ 221.154047] ? fs_reclaim_release+0xd0/0x110 [ 221.154062] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 221.154076] ? lock_acquire+0x170/0x3f0 [ 221.154090] ? check_preemption_disabled+0x41/0x2b0 [ 221.154106] ? __kmalloc_node+0x38/0x70 [ 221.154126] alloc_pages_current+0x19d/0x2c0 [ 221.154147] push_pipe+0x3e3/0x770 [ 221.154170] iov_iter_get_pages_alloc+0x5b1/0x1170 [ 221.154187] ? kernel_text_address+0xbd/0xf0 [ 221.154209] ? unwind_get_return_address+0x51/0x90 [ 221.301286] ? iov_iter_bvec+0x130/0x130 [ 221.305356] ? iov_iter_pipe+0xb4/0x2d0 [ 221.309343] default_file_splice_read+0x191/0xa10 [ 221.314188] ? kasan_kmalloc+0x139/0x160 [ 221.318258] ? alloc_pipe_info+0x1c8/0x4a0 [ 221.322493] ? splice_direct_to_actor+0x6dd/0x8d0 [ 221.327334] ? do_splice_direct+0x1a7/0x270 [ 221.331658] ? do_splice_direct+0x270/0x270 [ 221.335983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.341351] ? lock_downgrade+0x750/0x750 [ 221.345502] ? mark_held_locks+0xf0/0xf0 [ 221.349561] ? mark_held_locks+0xf0/0xf0 [ 221.353624] ? check_preemption_disabled+0x41/0x2b0 [ 221.358654] ? avc_has_perm+0x25f/0x450 [ 221.362727] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 221.367397] ? fsnotify+0x99c/0xd80 [ 221.371022] ? __fsnotify_parent+0xd1/0x31c [ 221.375357] ? fsnotify_first_mark+0x240/0x240 [ 221.379945] ? __inode_security_revalidate+0xef/0x140 [ 221.385194] ? avc_policy_seqno+0x9/0x70 [ 221.389255] ? selinux_file_permission+0xc1/0x5a0 [ 221.394106] ? security_file_permission+0x1c0/0x230 [ 221.399135] ? do_splice_direct+0x270/0x270 [ 221.403481] do_splice_to+0x10e/0x160 [ 221.407291] splice_direct_to_actor+0x2b9/0x8d0 [ 221.411966] ? page_cache_pipe_buf_release+0x280/0x280 [ 221.417253] ? do_splice_to+0x160/0x160 [ 221.421243] do_splice_direct+0x1a7/0x270 [ 221.425408] ? splice_direct_to_actor+0x8d0/0x8d0 [ 221.430262] ? security_file_permission+0x1c0/0x230 [ 221.435290] do_sendfile+0x550/0xc30 [ 221.439017] ? do_compat_pwritev64+0x1b0/0x1b0 [ 221.443605] ? vfs_write+0x393/0x540 [ 221.447328] __se_sys_sendfile64+0x147/0x160 [ 221.451739] ? __se_sys_sendfile+0x180/0x180 [ 221.456153] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 221.461518] ? trace_hardirqs_off_caller+0x6e/0x210 [ 221.466544] ? do_syscall_64+0x21/0x670 [ 221.470548] do_syscall_64+0xf9/0x670 [ 221.474361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.479551] RIP: 0033:0x45de59 [ 221.482745] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 221.501647] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 221.509456] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 221.516734] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 221.524007] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 02:52:13 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10010, 0x1a, 0x13012, r0, 0x0) [ 221.531362] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000003 [ 221.538631] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c 02:52:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0xd000) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000080)={0xd8, 0x81a}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000300)=ANY=[@ANYBLOB="7810000030003b0500000000000000000000000064000100600001000b000100736b626d6f6400003400028024000200"/76], 0x78}}, 0x0) [ 221.649315] overlayfs: failed to resolve './file0': -2 02:52:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x1001c, 0x1a, 0x13012, r0, 0x0) [ 221.688525] audit: type=1804 audit(1603162333.711:65): pid=10386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/33/bus/file0" dev="sda1" ino=16058 res=1 02:52:13 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) dup(0xffffffffffffffff) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x14, 0x4}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0002000000000000000000000000fbff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x5, 0x2, 0x20}) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xd) 02:52:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60083ff200140600fe8000000000000000000000000000bb088000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6020920000200600e5e7f1e40000000000000000000000bbfe0500000000000000000000000000aa00004e22bd89845eafe2351d09fdf868556d03a1784766d63e4a67a83e31ca065d0759366177b3c5320ca36d54cd2e8a2167abe656", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800000009078d0b431b22e0328bfed79fe0e5234f70000040a0000000000000000000017deefe6e6d44c5d2662ce06d49e44a57631679e97ceefe588acfd76ccbe086415a5058b263cb24a1b389049a711a673647930083c7139ae53607d36ac15104cdfd241a6d02d9927c65d51bd562d3b7b53bc94ddb01eac117c157e32c39a"], 0x0) r3 = semget$private(0x0, 0x2, 0x8) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f00000002c0)=""/215) [ 221.775365] audit: type=1804 audit(1603162333.711:66): pid=10386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/33/bus/file0" dev="sda1" ino=16058 res=1 02:52:13 executing program 4 (fault-call:6 fault-nth:4): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x6db6e559) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x109800, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047440, &(0x7f0000000000)=0x5) 02:52:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x1001d, 0x1a, 0x13012, r0, 0x0) 02:52:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xff, 0x0, 0x1}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x80000, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) [ 221.957201] FAULT_INJECTION: forcing a failure. [ 221.957201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.022017] CPU: 0 PID: 10410 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 222.029935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.039293] Call Trace: [ 222.041985] dump_stack+0x22c/0x33e [ 222.045645] should_fail.cold+0xa/0x2f [ 222.049545] ? lock_acquire+0x170/0x3f0 [ 222.053523] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 222.058642] __alloc_pages_nodemask+0x256/0x2a60 [ 222.063403] ? kasan_kmalloc+0x139/0x160 [ 222.067566] ? __kmalloc_node+0x4c/0x70 [ 222.071544] ? kvmalloc_node+0x61/0xf0 [ 222.075434] ? iov_iter_get_pages_alloc+0x562/0x1170 [ 222.080634] ? default_file_splice_read+0x191/0xa10 [ 222.085684] ? do_splice_to+0x10e/0x160 [ 222.089662] ? do_sendfile+0x550/0xc30 [ 222.093558] ? static_obj+0x50/0x50 [ 222.097189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 222.102038] ? deref_stack_reg+0x134/0x1d0 [ 222.106281] ? should_fail+0x142/0x7d8 [ 222.110173] ? fs_reclaim_release+0xd0/0x110 [ 222.114592] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 222.119719] ? lock_acquire+0x170/0x3f0 [ 222.123706] ? check_preemption_disabled+0x41/0x2b0 [ 222.128731] ? __kmalloc_node+0x38/0x70 [ 222.132718] alloc_pages_current+0x19d/0x2c0 [ 222.137135] push_pipe+0x3e3/0x770 [ 222.140697] iov_iter_get_pages_alloc+0x5b1/0x1170 [ 222.145721] ? kernel_text_address+0xbd/0xf0 [ 222.150148] ? unwind_get_return_address+0x51/0x90 [ 222.155093] ? iov_iter_bvec+0x130/0x130 [ 222.159164] ? iov_iter_pipe+0xb4/0x2d0 [ 222.163148] default_file_splice_read+0x191/0xa10 [ 222.167997] ? kasan_kmalloc+0x139/0x160 [ 222.172073] ? alloc_pipe_info+0x1c8/0x4a0 [ 222.176314] ? splice_direct_to_actor+0x6dd/0x8d0 [ 222.181163] ? do_splice_direct+0x1a7/0x270 [ 222.185490] ? do_splice_direct+0x270/0x270 [ 222.189818] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.195197] ? lock_downgrade+0x750/0x750 [ 222.199356] ? mark_held_locks+0xf0/0xf0 [ 222.203428] ? mark_held_locks+0xf0/0xf0 [ 222.207509] ? check_preemption_disabled+0x41/0x2b0 [ 222.212536] ? avc_has_perm+0x25f/0x450 [ 222.216519] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 222.221284] ? fsnotify+0x99c/0xd80 [ 222.224916] ? __fsnotify_parent+0xd1/0x31c [ 222.229256] ? fsnotify_first_mark+0x240/0x240 [ 222.233841] ? __inode_security_revalidate+0xef/0x140 [ 222.239036] ? avc_policy_seqno+0x9/0x70 [ 222.243358] ? selinux_file_permission+0xc1/0x5a0 [ 222.248213] ? security_file_permission+0x1c0/0x230 [ 222.253245] ? do_splice_direct+0x270/0x270 [ 222.257572] do_splice_to+0x10e/0x160 [ 222.261381] splice_direct_to_actor+0x2b9/0x8d0 [ 222.266060] ? page_cache_pipe_buf_release+0x280/0x280 [ 222.271348] ? do_splice_to+0x160/0x160 [ 222.275341] do_splice_direct+0x1a7/0x270 [ 222.279497] ? splice_direct_to_actor+0x8d0/0x8d0 [ 222.284354] ? security_file_permission+0x1c0/0x230 [ 222.289388] do_sendfile+0x550/0xc30 [ 222.293124] ? do_compat_pwritev64+0x1b0/0x1b0 [ 222.297719] ? vfs_write+0x393/0x540 [ 222.301443] __se_sys_sendfile64+0x147/0x160 [ 222.305863] ? __se_sys_sendfile+0x180/0x180 [ 222.310299] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 222.315671] ? trace_hardirqs_off_caller+0x6e/0x210 [ 222.320711] ? do_syscall_64+0x21/0x670 [ 222.324693] do_syscall_64+0xf9/0x670 [ 222.328503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.333698] RIP: 0033:0x45de59 [ 222.336893] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.355801] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.363513] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 02:52:14 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) [ 222.370788] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 222.378072] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 222.385345] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000004 [ 222.392641] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c 02:52:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x11c00, 0x1a, 0x13012, r0, 0x0) 02:52:14 executing program 1: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x4200, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000500)=0x7fffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'macvlan1\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_virt_wifi\x00'}, 0x18) socket$inet(0x2b, 0x0, 0x0) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000340)=0x8000) r3 = signalfd(r0, &(0x7f0000000000)={[0x602]}, 0x8) getsockname$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) r6 = accept$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x1c) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="e7efcf7a8542cd2150b6784a1b0d13d6153d137797fe6f9330fe5f1e0846e8eb9eeb5000dbfb02ccd486e0e5b77819ccec2632543b32436701b0a6ab453662161b31e34d6052bded2176fc02e412fc29387e3a012d910cfc69325f44d189532654964c", 0x63}, {&(0x7f00000001c0)="b1a49e5d83c317166b13e5c6c8089906edd17d2ea44fbe75b1fbd3758554c13a8dcab2c4b9a6e4d8b12f2b31e968668edca114fe76f1c0d2b03c3d1f9f147714a15f4cb66ef739bd659cee477d27c9bb85d093408062beb0fa6057a35e68c31f5a9f21e4fd4b288acd0a4667e931f66cba6467014606c8436cce1aa95a5b938f9c6173049e433f2fda06bc36748b4d6c1638a3ae775bb2", 0x97}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000000000000010000005a13034ee5d501efff00", @ANYRES32=r6, @ANYRES32=r2], 0x18, 0xc0d0}, 0x800) 02:52:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ff9000/0x4000)=nil, 0x4) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x0, 0x20000000}, 0xc) 02:52:14 executing program 5: ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2d7e3a656418c7f2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, 0x0, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4c1d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2aa6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) syncfs(r3) 02:52:14 executing program 4 (fault-call:6 fault-nth:5): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000000)={0x3, 0x800, 0x1, 'queue1\x00', 0x2}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x0, 0xd0e0000, 0x98, 0x100, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x20, 0xfffd}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 02:52:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x11d00, 0x1a, 0x13012, r0, 0x0) 02:52:14 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) [ 222.669245] IPVS: stopping backup sync thread 10443 ... [ 222.697442] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 02:52:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x14000, 0x1a, 0x13012, r0, 0x0) [ 222.765974] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 222.802375] FAULT_INJECTION: forcing a failure. [ 222.802375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:52:14 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE, @NL80211_ATTR_REASON_CODE={0x6}]}, 0xfffffffffffffeba}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x2e}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x18}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c051}, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x8000) modify_ldt$read(0x0, &(0x7f00000002c0), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x152) poll(0x0, 0x0, 0x204) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 02:52:14 executing program 1: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x4200, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000500)=0x7fffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'macvlan1\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_virt_wifi\x00'}, 0x18) socket$inet(0x2b, 0x0, 0x0) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000340)=0x8000) r3 = signalfd(r0, &(0x7f0000000000)={[0x602]}, 0x8) getsockname$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) r6 = accept$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x1c) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="e7efcf7a8542cd2150b6784a1b0d13d6153d137797fe6f9330fe5f1e0846e8eb9eeb5000dbfb02ccd486e0e5b77819ccec2632543b32436701b0a6ab453662161b31e34d6052bded2176fc02e412fc29387e3a012d910cfc69325f44d189532654964c", 0x63}, {&(0x7f00000001c0)="b1a49e5d83c317166b13e5c6c8089906edd17d2ea44fbe75b1fbd3758554c13a8dcab2c4b9a6e4d8b12f2b31e968668edca114fe76f1c0d2b03c3d1f9f147714a15f4cb66ef739bd659cee477d27c9bb85d093408062beb0fa6057a35e68c31f5a9f21e4fd4b288acd0a4667e931f66cba6467014606c8436cce1aa95a5b938f9c6173049e433f2fda06bc36748b4d6c1638a3ae775bb2", 0x97}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000000000000010000005a13034ee5d501efff00", @ANYRES32=r6, @ANYRES32=r2], 0x18, 0xc0d0}, 0x800) [ 222.820802] xt_NFQUEUE: number of queues (65533) out of range (got 65564) 02:52:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x3000000, 0x1a, 0x13012, r0, 0x0) 02:52:14 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 222.863303] CPU: 1 PID: 10457 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 222.871220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.880576] Call Trace: [ 222.883174] dump_stack+0x22c/0x33e [ 222.886813] should_fail.cold+0xa/0x2f [ 222.890714] ? lock_acquire+0x170/0x3f0 [ 222.894698] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 222.899819] __alloc_pages_nodemask+0x256/0x2a60 [ 222.904629] ? kasan_kmalloc+0x139/0x160 [ 222.908710] ? __kmalloc_node+0x4c/0x70 [ 222.911195] IPVS: stopping backup sync thread 10454 ... [ 222.912683] ? kvmalloc_node+0x61/0xf0 [ 222.912699] ? iov_iter_get_pages_alloc+0x562/0x1170 [ 222.912713] ? default_file_splice_read+0x191/0xa10 [ 222.912731] ? do_splice_to+0x10e/0x160 [ 222.936007] ? do_sendfile+0x550/0xc30 [ 222.939906] ? static_obj+0x50/0x50 [ 222.943811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 222.948668] ? deref_stack_reg+0x134/0x1d0 [ 222.952912] ? should_fail+0x142/0x7d8 [ 222.956909] ? fs_reclaim_release+0xd0/0x110 [ 222.961330] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 222.966445] ? lock_acquire+0x170/0x3f0 [ 222.970425] ? check_preemption_disabled+0x41/0x2b0 [ 222.975450] ? __kmalloc_node+0x38/0x70 [ 222.979454] alloc_pages_current+0x19d/0x2c0 [ 222.983868] push_pipe+0x3e3/0x770 [ 222.987423] iov_iter_get_pages_alloc+0x5b1/0x1170 [ 222.992370] ? kernel_text_address+0xbd/0xf0 [ 222.996788] ? unwind_get_return_address+0x51/0x90 [ 223.001722] ? iov_iter_bvec+0x130/0x130 [ 223.005791] ? iov_iter_pipe+0xb4/0x2d0 02:52:15 executing program 1: ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x4200, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000500)=0x7fffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'macvlan1\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_virt_wifi\x00'}, 0x18) socket$inet(0x2b, 0x0, 0x0) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000340)=0x8000) r3 = signalfd(r0, &(0x7f0000000000)={[0x602]}, 0x8) getsockname$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) r6 = accept$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x1c) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="e7efcf7a8542cd2150b6784a1b0d13d6153d137797fe6f9330fe5f1e0846e8eb9eeb5000dbfb02ccd486e0e5b77819ccec2632543b32436701b0a6ab453662161b31e34d6052bded2176fc02e412fc29387e3a012d910cfc69325f44d189532654964c", 0x63}, {&(0x7f00000001c0)="b1a49e5d83c317166b13e5c6c8089906edd17d2ea44fbe75b1fbd3758554c13a8dcab2c4b9a6e4d8b12f2b31e968668edca114fe76f1c0d2b03c3d1f9f147714a15f4cb66ef739bd659cee477d27c9bb85d093408062beb0fa6057a35e68c31f5a9f21e4fd4b288acd0a4667e931f66cba6467014606c8436cce1aa95a5b938f9c6173049e433f2fda06bc36748b4d6c1638a3ae775bb2", 0x97}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000000000000010000005a13034ee5d501efff00", @ANYRES32=r6, @ANYRES32=r2], 0x18, 0xc0d0}, 0x800) [ 223.009778] default_file_splice_read+0x191/0xa10 [ 223.014712] ? kasan_kmalloc+0x139/0x160 [ 223.018869] ? alloc_pipe_info+0x1c8/0x4a0 [ 223.023108] ? splice_direct_to_actor+0x6dd/0x8d0 [ 223.028323] ? do_splice_direct+0x1a7/0x270 [ 223.032653] ? do_splice_direct+0x270/0x270 [ 223.036977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.042346] ? lock_downgrade+0x750/0x750 [ 223.046506] ? mark_held_locks+0xf0/0xf0 [ 223.050571] ? mark_held_locks+0xf0/0xf0 [ 223.054642] ? check_preemption_disabled+0x41/0x2b0 [ 223.059675] ? avc_has_perm+0x25f/0x450 [ 223.063661] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 223.068348] ? fsnotify+0x99c/0xd80 [ 223.071988] ? __fsnotify_parent+0xd1/0x31c [ 223.076323] ? fsnotify_first_mark+0x240/0x240 [ 223.080917] ? __inode_security_revalidate+0xef/0x140 [ 223.086294] ? avc_policy_seqno+0x9/0x70 [ 223.090369] ? selinux_file_permission+0xc1/0x5a0 [ 223.095226] ? security_file_permission+0x1c0/0x230 [ 223.100257] ? do_splice_direct+0x270/0x270 [ 223.104589] do_splice_to+0x10e/0x160 [ 223.108400] splice_direct_to_actor+0x2b9/0x8d0 [ 223.113114] ? page_cache_pipe_buf_release+0x280/0x280 [ 223.118404] ? do_splice_to+0x160/0x160 [ 223.122403] do_splice_direct+0x1a7/0x270 [ 223.126912] ? splice_direct_to_actor+0x8d0/0x8d0 [ 223.131773] ? security_file_permission+0x1c0/0x230 [ 223.136808] do_sendfile+0x550/0xc30 [ 223.140543] ? do_compat_pwritev64+0x1b0/0x1b0 [ 223.145664] ? vfs_write+0x393/0x540 [ 223.149571] __se_sys_sendfile64+0x147/0x160 [ 223.153993] ? __se_sys_sendfile+0x180/0x180 [ 223.158413] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 223.163782] ? trace_hardirqs_off_caller+0x6e/0x210 [ 223.168801] ? do_syscall_64+0x21/0x670 [ 223.172789] do_syscall_64+0xf9/0x670 [ 223.176597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.181795] RIP: 0033:0x45de59 [ 223.184993] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.204684] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:52:15 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000300), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xd01, 0x3, 0x2a0, 0x100, 0x108, 0x0, 0x100, 0x108, 0x208, 0x1c8, 0x1c8, 0x208, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}, {[0xfffe]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x20be, 0x4, 0x0, 0x4}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfffffebe) [ 223.212491] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 223.219771] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 223.227055] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 223.234333] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000005 [ 223.241616] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c 02:52:15 executing program 4 (fault-call:6 fault-nth:6): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000140)="10c4645f010000000100000001000000040000000b000000002081aaac1a65f3b3bdd577f017023fdf46949121eb3633c2766292436564b1", 0x38, 0xb200}], 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x638a1c19, 0xffffffff, &(0x7f0000000080)=0x1}) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0xef, 0x4) getrandom(&(0x7f0000000480)=""/236, 0xec, 0x0) 02:52:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0x1a, 0x13012, r0, 0x0) [ 223.309851] IPVS: stopping backup sync thread 10492 ... [ 223.370443] FAULT_INJECTION: forcing a failure. [ 223.370443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:52:15 executing program 1: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="4c95fca6a26fd30ae916e8be405d284f959159adee8480043f1d83bbf7ebf0e0985350dd2a812fad40ba8d929c3d"], 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ede7009e83d61e2dbbc5a6", 0xb, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @private0, 0x2}, 0x1c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendfile(r0, r1, 0x0, 0x80006) [ 223.426790] CPU: 1 PID: 10497 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 223.435319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.444681] Call Trace: [ 223.447371] dump_stack+0x22c/0x33e [ 223.451013] should_fail.cold+0xa/0x2f [ 223.454918] ? lock_acquire+0x170/0x3f0 [ 223.458908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 223.464032] __alloc_pages_nodemask+0x256/0x2a60 [ 223.468799] ? kasan_kmalloc+0x139/0x160 [ 223.472867] ? __kmalloc_node+0x4c/0x70 [ 223.476857] ? kvmalloc_node+0x61/0xf0 [ 223.480745] ? iov_iter_get_pages_alloc+0x562/0x1170 [ 223.485860] ? default_file_splice_read+0x191/0xa10 [ 223.490879] ? do_splice_to+0x10e/0x160 [ 223.494946] ? do_sendfile+0x550/0xc30 [ 223.498843] ? static_obj+0x50/0x50 [ 223.502485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 223.507344] ? deref_stack_reg+0x134/0x1d0 [ 223.511588] ? should_fail+0x142/0x7d8 [ 223.515478] ? fs_reclaim_release+0xd0/0x110 [ 223.519897] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 223.525015] ? lock_acquire+0x170/0x3f0 [ 223.528997] ? check_preemption_disabled+0x41/0x2b0 [ 223.534021] ? __kmalloc_node+0x38/0x70 [ 223.538009] alloc_pages_current+0x19d/0x2c0 [ 223.542464] push_pipe+0x3e3/0x770 [ 223.546031] iov_iter_get_pages_alloc+0x5b1/0x1170 [ 223.550971] ? kernel_text_address+0xbd/0xf0 [ 223.555390] ? unwind_get_return_address+0x51/0x90 [ 223.560320] ? iov_iter_bvec+0x130/0x130 [ 223.564386] ? iov_iter_pipe+0xb4/0x2d0 [ 223.568367] default_file_splice_read+0x191/0xa10 [ 223.573214] ? kasan_kmalloc+0x139/0x160 [ 223.577284] ? alloc_pipe_info+0x1c8/0x4a0 [ 223.581526] ? splice_direct_to_actor+0x6dd/0x8d0 [ 223.586373] ? do_splice_direct+0x1a7/0x270 [ 223.593562] ? do_splice_direct+0x270/0x270 [ 223.597895] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.603264] ? lock_downgrade+0x750/0x750 [ 223.607429] ? mark_held_locks+0xf0/0xf0 [ 223.611494] ? mark_held_locks+0xf0/0xf0 [ 223.615563] ? check_preemption_disabled+0x41/0x2b0 [ 223.620594] ? avc_has_perm+0x25f/0x450 02:52:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e7"]) futimesat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, 0x0, 0x4001) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x103}}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x125e, 0x74d000) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x9, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [{0x2, 0x5, 0xffffffffffffffff}, {}], {0x4, 0x5}, [{0x8, 0x7}, {0x8, 0x8, 0xffffffffffffffff}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x2, r2}, {0x8, 0x4, r4}, {0x8, 0x3be0505aa210bb6a}, {0x8, 0x1, r5}, {0x8, 0x6, r7}], {0x10, 0x2}, {0x20, 0x5}}, 0x7c, 0x1) [ 223.624579] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 223.629255] ? fsnotify+0x99c/0xd80 [ 223.632880] ? __fsnotify_parent+0xd1/0x31c [ 223.637212] ? fsnotify_first_mark+0x240/0x240 [ 223.641805] ? __inode_security_revalidate+0xef/0x140 [ 223.647010] ? avc_policy_seqno+0x9/0x70 [ 223.651078] ? selinux_file_permission+0xc1/0x5a0 [ 223.655929] ? security_file_permission+0x1c0/0x230 [ 223.660954] ? do_splice_direct+0x270/0x270 [ 223.665281] do_splice_to+0x10e/0x160 [ 223.669089] splice_direct_to_actor+0x2b9/0x8d0 [ 223.673773] ? page_cache_pipe_buf_release+0x280/0x280 [ 223.679179] ? do_splice_to+0x160/0x160 [ 223.683170] do_splice_direct+0x1a7/0x270 [ 223.687330] ? splice_direct_to_actor+0x8d0/0x8d0 [ 223.692199] ? security_file_permission+0x1c0/0x230 [ 223.697406] do_sendfile+0x550/0xc30 [ 223.701142] ? do_compat_pwritev64+0x1b0/0x1b0 [ 223.705735] ? vfs_write+0x393/0x540 [ 223.709460] __se_sys_sendfile64+0x147/0x160 [ 223.713877] ? __se_sys_sendfile+0x180/0x180 [ 223.718296] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 223.723665] ? trace_hardirqs_off_caller+0x6e/0x210 [ 223.728687] ? do_syscall_64+0x21/0x670 [ 223.732668] do_syscall_64+0xf9/0x670 [ 223.736470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.741657] RIP: 0033:0x45de59 [ 223.744835] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.763724] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:52:15 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 223.772406] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 223.780722] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 223.787978] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 223.795237] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000006 [ 223.802505] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c [ 223.857169] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 223.857169] 02:52:15 executing program 4 (fault-call:6 fault-nth:7): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 223.909653] UDF-fs: bad mount option "ç" or missing value 02:52:16 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7ffffffff000, 0x1a, 0x13012, r0, 0x0) [ 223.997466] UDF-fs: bad mount option "ç" or missing value [ 224.003224] FAULT_INJECTION: forcing a failure. [ 224.003224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.016662] CPU: 1 PID: 10533 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 224.024559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.033914] Call Trace: [ 224.036504] dump_stack+0x22c/0x33e [ 224.041090] should_fail.cold+0xa/0x2f [ 224.044978] ? lock_acquire+0x170/0x3f0 [ 224.048948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 224.054061] __alloc_pages_nodemask+0x256/0x2a60 [ 224.058814] ? kasan_kmalloc+0x139/0x160 [ 224.062881] ? __kmalloc_node+0x4c/0x70 [ 224.066866] ? kvmalloc_node+0x61/0xf0 [ 224.070858] ? iov_iter_get_pages_alloc+0x562/0x1170 [ 224.075977] ? default_file_splice_read+0x191/0xa10 [ 224.080996] ? do_splice_to+0x10e/0x160 [ 224.084980] ? do_sendfile+0x550/0xc30 [ 224.088861] ? static_obj+0x50/0x50 [ 224.092496] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.097332] ? deref_stack_reg+0x134/0x1d0 [ 224.101557] ? should_fail+0x142/0x7d8 [ 224.105431] ? fs_reclaim_release+0xd0/0x110 [ 224.109826] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 224.114936] ? lock_acquire+0x170/0x3f0 [ 224.118899] ? check_preemption_disabled+0x41/0x2b0 [ 224.123904] ? __kmalloc_node+0x38/0x70 [ 224.127886] alloc_pages_current+0x19d/0x2c0 [ 224.132300] push_pipe+0x3e3/0x770 [ 224.135836] iov_iter_get_pages_alloc+0x5b1/0x1170 [ 224.140756] ? kernel_text_address+0xbd/0xf0 [ 224.145157] ? unwind_get_return_address+0x51/0x90 [ 224.150201] ? iov_iter_bvec+0x130/0x130 [ 224.154258] ? iov_iter_pipe+0xb4/0x2d0 [ 224.161262] default_file_splice_read+0x191/0xa10 [ 224.166212] ? kasan_kmalloc+0x139/0x160 [ 224.170450] ? alloc_pipe_info+0x1c8/0x4a0 [ 224.174671] ? splice_direct_to_actor+0x6dd/0x8d0 [ 224.179496] ? do_splice_direct+0x1a7/0x270 [ 224.183820] ? do_splice_direct+0x270/0x270 [ 224.188129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.193480] ? mark_held_locks+0xf0/0xf0 [ 224.197526] ? __schedule+0x8ed/0x22e0 [ 224.201403] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 224.206143] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 224.210712] ? fsnotify+0x99c/0xd80 [ 224.214324] ? __fsnotify_parent+0xd1/0x31c [ 224.219675] ? fsnotify_first_mark+0x240/0x240 [ 224.224243] ? __inode_security_revalidate+0xef/0x140 [ 224.229431] ? avc_policy_seqno+0x9/0x70 [ 224.233485] ? selinux_file_permission+0xc1/0x5a0 [ 224.238328] ? security_file_permission+0x1c0/0x230 [ 224.243334] ? do_splice_direct+0x270/0x270 [ 224.247664] do_splice_to+0x10e/0x160 [ 224.251456] splice_direct_to_actor+0x2b9/0x8d0 [ 224.256116] ? page_cache_pipe_buf_release+0x280/0x280 [ 224.261380] ? do_splice_to+0x160/0x160 [ 224.265359] do_splice_direct+0x1a7/0x270 [ 224.269493] ? splice_direct_to_actor+0x8d0/0x8d0 [ 224.274325] ? security_file_permission+0x1c0/0x230 [ 224.279351] do_sendfile+0x550/0xc30 [ 224.283069] ? do_compat_pwritev64+0x1b0/0x1b0 [ 224.287652] ? vfs_write+0x393/0x540 [ 224.291353] __se_sys_sendfile64+0x147/0x160 [ 224.295747] ? __se_sys_sendfile+0x180/0x180 [ 224.300153] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 224.305510] ? trace_hardirqs_off_caller+0x6e/0x210 [ 224.310513] ? do_syscall_64+0x21/0x670 [ 224.314475] do_syscall_64+0xf9/0x670 [ 224.318265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.323437] RIP: 0033:0x45de59 [ 224.326615] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.345530] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.353220] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 224.360472] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 224.367725] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 224.375087] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000007 [ 224.382356] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c 02:52:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$inet6(0xa, 0x2000000080803, 0x2f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0xff90, 0x0, 0x5, 0x8}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 02:52:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000140)="10c4645f010000000100000001000000040000000b000000002081aaac1a65f3b3bdd577f017023fdf46949121eb3633c2766292436564b1", 0x38, 0xb200}], 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x638a1c19, 0xffffffff, &(0x7f0000000080)=0x1}) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0xef, 0x4) getrandom(&(0x7f0000000480)=""/236, 0xec, 0x0) 02:52:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x4, 0x13012, r0, 0x0) 02:52:16 executing program 2: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:16 executing program 5: ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) munmap(&(0x7f0000017000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x1, 0x200400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x604100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x2000}) 02:52:16 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x39) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) sendmsg(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a00)}, {&(0x7f0000000480)="940047bd5f4da7365ebfc3f103636baeb6a97457ad60a8dfef", 0x19}, {&(0x7f00000004c0)}, {0x0, 0xfffffffffffffdb5}, {&(0x7f0000001b00)="6e716d454b1022eedbce13d3d4e551f20b2f87dc532d0f27b85cbc3330e3020ce631784a0cc60abf76563adeda06aee38e8a5395576771fb55e66c8575d79a96d0fed36e7ac47648ac9072f32c1ce833d4a39ae41dbfb0435c4eed8e713911bd3593f372a900efe7022b4d7936fe1c69c1151fe758e1470b960a970b3e30698878316b5922b31f3fc08c884ed52fda686221cf505e11046f94876206ad40b9a8cb5016ceb1b71846677a4fe84ed601b2c1e44b8a68bd6aef227c3f9f2bd5104375094e8a1d030b23e3ce34ccf297822f9df2b4c4092a797511032b8e6dd6", 0xde}, {&(0x7f0000000240)="7eed52caf49cb3bf2bed5ad47cf0399d28aa064ef8c77abe337d75ba7e15299001dff2c2a1434609aece1bba4bf5189468afd23c36910804d5f6b67cb110db3930c53510b7492c6bd97a03a3e7b208819902d83deae08c3db74dd2cfaf1342bf54d56fb5ab732eadca0608191e83a036aa792fc2b108591fd441d67828b33d8b10f03b33c76f5759d10db11f60285bcdd553037024ad03920def873d07327be4b07f6a3df918ca", 0xa7}, {&(0x7f0000001d00)="29deb346f62d3d9bdde89c823d97e5beb919b963c412b6e242e3aa45400b26439967fc256d6af5002329996621e9ca698691a24871b4c221c26a3540ea41a1b5507a820d84f69fb575437c7148f0167c18824ee261cb05b7fb918196bb9060477c89117dd6973dbfa9406c1610a42c176892cf0b96a29a9bae9eed6231c102b207c18849863b82aabb443df45f", 0x8d}], 0x7}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000100)=0xee) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r5, r3, 0x3}, 0x10) openat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x12000005f) [ 224.596329] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 224.596329] 02:52:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x10) [ 224.672830] overlayfs: failed to resolve './file1': -2 02:52:16 executing program 4 (fault-call:6 fault-nth:8): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:16 executing program 2: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 224.703484] audit: type=1804 audit(1603162336.721:67): pid=10563 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/40/bus/file0" dev="sda1" ino=16055 res=1 02:52:16 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x5, "cf17f0", 0x2, 0xff}) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="fcfb87ed673e40443a218f14052d2fc3bcb3698898990fd3251372db4ce49d77fbb835149b97c8a4a23e5b1c13c192fbbb2a874b087ce4b3601ced6a3078c810b17a348887f0474f2781d0791ffa5a9c01640775a689c6dd4fc324d26b52164d20350ce4144beee4c14cbfa323a54c981f"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 02:52:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1c) [ 224.821914] overlayfs: failed to resolve './file1': -2 [ 224.828688] FAULT_INJECTION: forcing a failure. [ 224.828688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.828790] audit: type=1804 audit(1603162336.721:68): pid=10563 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/40/bus/file0" dev="sda1" ino=16055 res=1 [ 224.899216] ceph: device name is missing path (no : separator in üû‡íg>@D:!-/ü³iˆ˜™Ó%rÛLäwû¸5›—Ȥ¢>[Á’û»*‡K|ä³`íj0xȱz4ˆ‡ðGO'ÐyúZœdu¦‰ÆÝOÃ$ÒkRM 5 äKîäÁL¿£#¥L˜ys/fs/cgroup/systemd rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,xattr,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd [ 224.899216] 160 158 0:30 / /sys/fs/cgroup/perf_event rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,perf_event [ 224.899216] 161 158 0:31 / /sys/fs/cgroup/net_cls,net_prio rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,net_cls,net_prio [ 224.899216] 162 158 0:32 / /sys/fs/cgroup/freezer rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,freezer [ 224.899216] 163 158 0:33 /../.. /sys/fs/cgroup/pids rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,pids [ 224.899216] 164 158 0:34 / /sys/fs/cgroup/blkio rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,blkio [ 224.899216] 165 158 0:35 / /sys/fs/cgroup/cpuset rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,cpuset [ 224.917129] CPU: 1 PID: 10576 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 224.996231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.006376] Call Trace: [ 225.009065] dump_stack+0x22c/0x33e [ 225.009507] ceph: device name is missing path (no : separator in üû‡íg>@D:!-/ü³iˆ˜™Ó%rÛLäwû¸5›—Ȥ¢>[Á’û»*‡K|ä³`íj0xȱz4ˆ‡ðGO'ÐyúZœdu¦‰ÆÝOÃ$ÒkRM 5 äKîäÁL¿£#¥L˜ys/fs/cgroup/systemd rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,xattr,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd [ 225.009507] 160 158 0:30 / /sys/fs/cgroup/perf_event rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,perf_event [ 225.009507] 161 158 0:31 / /sys/fs/cgroup/net_cls,net_prio rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,net_cls,net_prio [ 225.009507] 162 158 0:32 / /sys/fs/cgroup/freezer rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,freezer [ 225.009507] 163 158 0:33 /../.. /sys/fs/cgroup/pids rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,pids [ 225.009507] 164 158 0:34 / /sys/fs/cgroup/blkio rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,blkio [ 225.009507] 165 158 0:35 / /sys/fs/cgroup/cpuset rw,nosuid,nodev,noexec,relatime - cgroup cgroup rw,cpuset [ 225.013312] should_fail.cold+0xa/0x2f [ 225.013330] ? lock_acquire+0x170/0x3f0 [ 225.013346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 225.013400] __alloc_pages_nodemask+0x256/0x2a60 [ 225.124544] ? kasan_kmalloc+0x139/0x160 [ 225.128722] ? __kmalloc_node+0x4c/0x70 [ 225.132708] ? kvmalloc_node+0x61/0xf0 [ 225.136606] ? iov_iter_get_pages_alloc+0x562/0x1170 [ 225.141747] ? default_file_splice_read+0x191/0xa10 [ 225.149289] ? do_splice_to+0x10e/0x160 [ 225.151519] audit: type=1804 audit(1603162336.911:69): pid=10578 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/41/bus/file0" dev="sda1" ino=16070 res=1 [ 225.153273] ? do_sendfile+0x550/0xc30 [ 225.153294] ? static_obj+0x50/0x50 [ 225.153308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 225.153326] ? deref_stack_reg+0x134/0x1d0 [ 225.180709] audit: type=1804 audit(1603162336.911:70): pid=10578 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/41/bus/file0" dev="sda1" ino=16070 res=1 [ 225.181573] ? should_fail+0x142/0x7d8 [ 225.181589] ? fs_reclaim_release+0xd0/0x110 [ 225.181602] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 225.181619] ? lock_acquire+0x170/0x3f0 [ 225.238791] ? check_preemption_disabled+0x41/0x2b0 [ 225.243814] ? __kmalloc_node+0x38/0x70 [ 225.247795] alloc_pages_current+0x19d/0x2c0 [ 225.252208] push_pipe+0x3e3/0x770 [ 225.256709] iov_iter_get_pages_alloc+0x5b1/0x1170 [ 225.261640] ? kernel_text_address+0xbd/0xf0 [ 225.266050] ? unwind_get_return_address+0x51/0x90 [ 225.270975] ? iov_iter_bvec+0x130/0x130 [ 225.275044] ? iov_iter_pipe+0xb4/0x2d0 [ 225.279017] default_file_splice_read+0x191/0xa10 [ 225.284069] ? kasan_kmalloc+0x139/0x160 [ 225.288159] ? alloc_pipe_info+0x1c8/0x4a0 [ 225.292387] ? splice_direct_to_actor+0x6dd/0x8d0 [ 225.297231] ? do_splice_direct+0x1a7/0x270 [ 225.301554] ? do_splice_direct+0x270/0x270 [ 225.305880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.312023] ? lock_downgrade+0x750/0x750 [ 225.316430] ? mark_held_locks+0xf0/0xf0 [ 225.320750] ? mark_held_locks+0xf0/0xf0 [ 225.324810] ? check_preemption_disabled+0x41/0x2b0 [ 225.329834] ? avc_has_perm+0x25f/0x450 [ 225.333808] ? avc_has_perm_noaudit+0x3e0/0x3e0 [ 225.338474] ? fsnotify+0x99c/0xd80 [ 225.342096] ? __fsnotify_parent+0xd1/0x31c [ 225.346417] ? fsnotify_first_mark+0x240/0x240 [ 225.351003] ? __inode_security_revalidate+0xef/0x140 [ 225.356191] ? avc_policy_seqno+0x9/0x70 [ 225.360252] ? selinux_file_permission+0xc1/0x5a0 [ 225.365100] ? security_file_permission+0x1c0/0x230 [ 225.370117] ? do_splice_direct+0x270/0x270 [ 225.374439] do_splice_to+0x10e/0x160 [ 225.378245] splice_direct_to_actor+0x2b9/0x8d0 [ 225.382916] ? page_cache_pipe_buf_release+0x280/0x280 [ 225.388196] ? do_splice_to+0x160/0x160 [ 225.392175] do_splice_direct+0x1a7/0x270 [ 225.396323] ? splice_direct_to_actor+0x8d0/0x8d0 [ 225.401171] ? security_file_permission+0x1c0/0x230 [ 225.406191] do_sendfile+0x550/0xc30 [ 225.409913] ? do_compat_pwritev64+0x1b0/0x1b0 [ 225.414497] ? vfs_write+0x393/0x540 [ 225.418213] __se_sys_sendfile64+0x147/0x160 [ 225.422616] ? __se_sys_sendfile+0x180/0x180 [ 225.427026] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 225.432390] ? trace_hardirqs_off_caller+0x6e/0x210 [ 225.437403] ? do_syscall_64+0x21/0x670 [ 225.441395] do_syscall_64+0xf9/0x670 [ 225.445202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.450391] RIP: 0033:0x45de59 [ 225.453580] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.472497] RSP: 002b:00007fb21a410c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 225.480546] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 225.487809] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 02:52:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000800000027000000000000009500000000000000a579753dec008027f9041e0c35f0d16c7e6240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea547353f546546ba577bf3a942c694e702d609331ab3c70aa6b030ed69efddccea3e793e82870552f292ee3cb349942d00e5f3e582d0c41d4f5fef499e2a4ce758601229b94574e7825441222e81748b4ee09cc6d847ef6943a143669ef5fc545ab7ffef72fd2ca305f386142d7835f213e7ff0b00001731859eba975d4a1809acbc7b716441ef6bac34d0c99d698fafc1ca62456ec766be4825548e085c7866d7ac33165a2178a5c647457a8713e7b70a850300000000000000d43c96aebc3da20d188f590ec28e549e8e3d4fe60c9fea00000000000100019efc0060c9e1263ca5507f0000000002ffa95acb51428785ae09fdae241f51f7ff22745696f1ffe2ca9ed226213275a566ae3f64fb2dfe777d16832bbb703ea39868fcf0fe11894d2c876e485aa16ce03ba31d2e344151341d1008ae03265f8f99ae15d9b711f4b6746dce6ec1ce34d2e2d5241435b5ddc91e9e99ad6b9cbe55e294f5b1e5dc8f1c7bdd3cf375c0b30ce6ba07ce35f90f0c589bc98d678d7e258d5d74ff33278866780ddac5fe771e6ae67da6e2df4a560436fa3cb7598f923c7316bb7c31f8e867734a5a66f05d5d7183fc05c0d804ac719fa87f64cd637deb88254e9ded8cb00c1276b1aaffb3cf86fb92efc51802cdd76a73fd639edea09b5cb990ea1bc76127057ad3ae00000000000000000000444e477613181b1c6fb1f9c3cb0f5b0a1879b2d25c55dd04442f2f739ce0b3e4377f3d9887cdf898a4463717a1cf4c5d83e93d581b815950e21279f8bcb5167247a398754a1493639f275c5d6c6ea752b63551125eda435ba90c0700e1383f43a77508c2cd9fb2636db3abed6453179e3ca03bd3a3dbc4b61dbbfce11ce2d9dbeb6844a88348197292379d22fb6ea97a4f734953d3697cad93d588172c99700fc4f2983edf5d8bb2ec6dc0cc319881b43b7a8a281f872d0000000000ddad9444a6f712c20fd0d908c376316a7b26cbaad28bc703c9492f01de1f5d2093213aa1354e783b15f627834d840c6738f8b16b80cc0b0582a3aa02553979e47bdf3716228c4ff4676997286042b43c6cb7e2a01a16ae5757072574afadf6962a40ed57025b5a3897db7f94e8d5ba14fd018c5b302942916cf7314e3c9a00a378771ee3c704a3947879f4ea1f031cd8432a27bc2cb985d55dc9dda1257c5937d89c208ce9f2fcc78141937a45471b78038261b6f100e74937ae385339b2b692d14723b108f6d315004144902131c3d0a2ef34a4642a969c03c5cad2d02cdd0aad88c8469d3b7adac6ba358cccf8aba63df924f12bee6386028b45b965404f69e417fa73365ba8d6d66398d25f952246ea3266f76ca6fc41c1d9ae9521980f4ddd4fbe5ee765db63674a3427e05b4c1177ab8c76aa962704bcaffe28ab9861c948d5109665d366061a5f692e006aa4a1063ac001b5bcb313d7eece29302650747d90e212c425a2fa622d7263cd173a450770eb97964fb7fc555622c6ce8067a60243f038ea38b2f0b3000000002a362ba7402cb9ac3cc01b844214c0e9ed9fdbf1d1ebcbda4d9ba89e549383979385d7730fe2cdeb113dec3b431fbbede9f3ef2c59e872cc1bea2b3d617bdd8f74990a2783ebb211a2851dd6d7d51bd3b3acf00d0c6f0f42d73fc9099d1a5ce4c92533f0791044b48181c2aca4264f91de3db58224b0a9e4a348eb2dff00000000000000000000000000005f8ddf6ce7e9cf423ffef361eb8d1190453e3212ffc5dd2c0289429c15d267c5687efc4681433408efc1337d3ee673ccd9054d6f29db709ed525965e48a27af74589"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='c\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002700000008000300", @ANYRES32=r5, @ANYBLOB="0a00060050505050505000000600360000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x28}}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x4a1236961872571, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) [ 225.495247] RBP: 00007fb21a410ca0 R08: 0000000000000000 R09: 0000000000000000 [ 225.502528] R10: 000000000000d811 R11: 0000000000000246 R12: 0000000000000008 [ 225.509806] R13: 00007fffcf00cd5f R14: 00007fb21a4119c0 R15: 000000000118bf2c 02:52:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1d) 02:52:17 executing program 2: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1c00) [ 225.734339] overlayfs: failed to resolve './file1': -2 [ 225.790488] audit: type=1804 audit(1603162337.812:71): pid=10602 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/42/bus/file0" dev="sda1" ino=16070 res=1 [ 225.910535] audit: type=1804 audit(1603162337.852:72): pid=10602 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/42/bus/file0" dev="sda1" ino=16070 res=1 02:52:18 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x6082, 0x0) 02:52:18 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000648eac)=ANY=[@ANYBLOB="4001000010001707000000000000000000000000000000000000000000000000ac1414aa0000030000000000000002009d0fbd85b5a2daeb3b99a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 02:52:18 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x203, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x80}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000240)) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x0, 0x73) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 02:52:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd810) 02:52:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1d00) [ 226.131578] overlayfs: failed to resolve './file1': -2 02:52:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x4000) 02:52:18 executing program 0: perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x10017}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x18, 0x11, 0x78, &(0x7f00000001c0)}) [ 226.168686] audit: type=1804 audit(1603162338.192:73): pid=10628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/43/bus/file0" dev="sda1" ino=16063 res=1 02:52:18 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in6=@loopback}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) 02:52:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd812) [ 226.257321] audit: type=1804 audit(1603162338.192:74): pid=10628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/43/bus/file0" dev="sda1" ino=16063 res=1 02:52:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x400000) 02:52:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={[], 0x3}, 0xd, 'veth0_to_hsr\x00'}) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44050}, 0x81) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000001c0)={[{@map_acorn='map=acorn'}, {@norock='norock'}, {@mode={'mode'}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000300)=0xbd6, 0x4) [ 226.374714] overlayfs: failed to resolve './file1': -2 [ 226.434636] audit: type=1804 audit(1603162338.462:75): pid=10658 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/44/bus/file0" dev="sda1" ino=16087 res=1 02:52:18 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x6b6b6b) [ 226.550379] audit: type=1804 audit(1603162338.482:76): pid=10651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/44/bus/file0" dev="sda1" ino=16087 res=1 [ 226.636138] overlayfs: failed to resolve './file1': -2 02:52:19 executing program 1: perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x10017}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x18, 0x11, 0x78, &(0x7f00000001c0)}) 02:52:19 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 02:52:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd842) 02:52:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1000000) 02:52:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:19 executing program 0: perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x10017}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x18, 0x11, 0x78, &(0x7f00000001c0)}) 02:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1000, 0x8, 0xfa, 0x8}, {0x5, 0x1, 0x7, 0x6}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x40}}, 0x0) 02:52:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x10000000) 02:52:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x3, &(0x7f0000000040)=[{&(0x7f0000000f00)="400020000100010006000000001c08107f1387", 0x13, 0x400}, {&(0x7f0000010100)="ff00000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed415cf970000000e7c2645f5303", 0x80e, 0x800}, {0x0, 0x0, 0x4c00}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ed774352fbc8d53df9ad9d7ccf9cb493345fae5102bb61497e9365ea4bca36aa"]) 02:52:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd848) 02:52:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 227.522177] MINIX-fs: mounting file system with errors, running fsck is recommended 02:52:19 executing program 1: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000010000000b"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fadvise64(r0, 0x0, 0x0, 0x1) lseek(r0, 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x8f37a13177aed7b1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3b46b472869ec9aa947dfdcbd332e6e7"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dc42abc560cda1270ebed396768bd98f"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d30ad57f089f"}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000200)=""/81) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getdents(r0, 0x0, 0x0) 02:52:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1c000000) 02:52:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd849) 02:52:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000002700)=[{&(0x7f00000002c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f200000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f00000025c0)="111fc0d901000000803a0900803a09000000000006cffc3731", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000440)={0xa, @output={0x1000, 0x1, {0x8, 0x5}, 0xfffffffc, 0x800000}}) mount$9p_xen(&(0x7f0000000180)='syz\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x40, &(0x7f0000000340)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x80000001}}, {@access_user='access=user'}, {@fscache='fscache'}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt={'uid<'}}]}}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x1}, 0x8) r5 = dup(r2) fstat(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r6, 0x0) 02:52:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) fstat(r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xc0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x7, 0x1, 0x38, 0x3, 0x6, 0x7}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000075, 0x0) 02:52:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1d000000) 02:52:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 227.816121] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 227.852170] 9pnet: Could not find request transport: xen 02:52:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2800, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x140e, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000100}, 0xd804) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000c7c5c7a200050000002712000900010076"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00\f\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000000000000c0001007463696e646578001400020006000200000000000800010000000000"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) splice(r3, 0x0, r5, 0x0, 0x8000010003, 0x0) 02:52:19 executing program 1: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x7fff) r0 = fanotify_init(0x0, 0x800) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1015, 0x1, 0x3, "abedd2dd8cba07554f8df538b324e0d8", "dddbfd1047f25c30e9753d0e612042e91633c6026896f03a1ba97aa7b949d74381c334b31e9ec500e9f1b499599c5c7e48fbbe388de59f97fc9d519913c657057bf4adc62fc7bbf5cee000971a99d80b92b97974a0e433b75712269e43ca6ccc9f9ecfa31a6d7e04dbd16b108c161129bf4872570e0ffda9a2d6a13bb6bb7f070f61795b9ea280f10f1093e43613dbf149889f72efed5b9a53baef55766d13b4ee7dce56a524b635834235b9d97116e7404545f42a038027b849f24ba8ce5c52193e227f7804a83b1b9f4c3c5c1bebb777e1fd8670fbe2121bf6014986ef38dbeff52b02fac8424fd70e8ae68bb1808e37b34ff5a16991b7420b45da7bc758a8178b4aa3af98b268c2e5e932967841d835b7d3f734691b49e7d66472dfe9e81efec412b0ea04e6ba291d51558b9cbd5030e7862e97d8b0ae20151a6584f4aa88b0d6261e274ed225b7e8a1bcd59a6e2be00b6b863de117df2df2710c7780ae7edd7a8cfe40633e57e840535edb335f37a7b05f95ba28a3b68f10ba7b2e933fd8f3626eedb6b31088a13ba18acd59b8655eae344c92c2bb9bcff13e84b86a6e3d2aeee8d50925240753f37fed40c7eaf7452f9064a0ef4f4bc864441903c872fb47e975a398b342b2c38676ea72015e620e8d816fdce94627468362afc2fd8f21a94cc70ee928ff7ae54c8c1f3fe594a3dfb87ac9b704137d88106fd9747b187c9b230e508c8396ac1d4b4c1f5a519796aed0dd5a39a0fb839d78356cd715f97f37581914233231c1964547c4bc4b0ac7046d681b058be7fe63fcacbf575f10d03db64703f29a66258c7717449130e17c663c912d7476dbc85e6a0d829561a04c07de1cb2799a1101546a00d32cba6ac5b1a37df495319d5a0062e70ca8b376e1fbdc647d3480298da844a913178b1187d4b19afcd2564a0c25f2d5b550245f33590b7463134db8897bd089591e907601f7a46289ba3cdd7b197a91c2b8ac93899614d3abd21ff32a1d3474d02f14f13244b94183b3965ce48865c22da6f1086ec388e920115cda5538d96898c29eeed9a949beb7fc44c25235d5a2038d53998320ae0e1fee6d3a97bfbeca484b8b6259c1e11738530caa4ef51096f5eeb6a4b1d5d14f565ee1dc1722e9b59287c3cd706034de890f06444cb8988fceb4f527fabc306f62e448dbbe0deee23871d7ed48838cabe86d8351a831d152920ce9d8f908b1df40c626df9dad479da3fad639d603dad5511c94e3f9d7b9dde0bc14d86889c45467f97cebc67752b873a96603a6c8820afc56e42f49a3c2aa2e07c114c25efad0c24aa57c02f5c7afab50bf503f3fc492b2452b2ce57beddc00d9cd0f537c83a3a3ecf893c5bc6cd96df617e43b3af5aa8ed476d5833bd7afa3646eede495b3a6f837c31efe202aef8f865e57671cf8d47be3cdf7a947775e200331dc19c8921ec7dd204b1646b4c2e2ca774bdfb3b113af0f3eb902fb04d7cd10be87a9433785b0ec95be6ed56cfa09f64d18b33f56402b3fa409239b8498788f17e476bc2843c7b10f802a9944b7cfb3499807b337fa2767f8c564ce7cc857b38954896b91dc386b03306ff47df1ace4a38087c9e60b18e1c2aa7c16e3b475b9f355702e1ceff8834d567a3f1f7d992cc7dcddd5f2df5af3e07b4fc2241210d2b936405d0f86fc97bc0abbc0ba073b5ee93e7afeef284438266ddb6c034a440cf00b581e5b770b4c562c81507cc009bb4492c0f7fa7838d489529428a47981206cf8df189f73de0ffd047dc7e4eac62e76f6c1962faf794f82d044f1f5e040b4e692b172915ce8c89b567379d0d07cb07a32d3bd2b1bd804bb9c6590d8777b8f5e00e1f4875ce6ce0268d73770d407e101f0cb6384bb3846487947d3979aa1faffbcdc3b2877518819fa41fc031d5a177df18ebf7bdf400b7362b5ff3b4844224dcdb8b5c257e895a18f842299c414e216e3156a83ca30451652257f8b72e06389545558193c69fabdd9cc66cc753c388663b5a50da5feffc8990f12ceed328e53c2990e4555c4a3ce9f883da55c83e8bf01bacd09f8f380e9653b8d134d132537e2462bde2fee6b18c41b220aa7441b45c70e33f3ac94a0304f033a2d5d7d1e94ad1c854c6271b4c050c9e6e11722e82413c162229ccac33e46a7407112f188423854bc66f2f91ecc84c60ca0a131ff0525d2760543a213f580d26156d0aa49c0cdaf5661ce07d1988158d269456d9373993bd79e16305ca486a4aee6143976cee6857f0a7df2fc65469a72c22720005266d8d510a35a1e80c341b85b23218cf396b921de43bd615789a86ac21e12bb6d2c816ac97167264fa48b88fa66d5d269c0264df034b6c5048428927a94692d7b3c93ac99457b0e03e07551fe4505531dfd20dde9d4570e80f23254ca9da07b265b75d1086dbcbc68326e0405fc100d3c496d4baa4163f7b0585ab97fc032b6a5beac2c37f711b01594dafed780603870b6f52b22ec30e1f7ab8e23b8c78944fa72820e64a75552300f13edf9f1e9db1f6470d1e81f3386cdfa076247ad71dbc6bd3644e4aa2b208ba7f1ca56e5ae210b5d432eee1190f83f77d04f21608ceedc80c5a9ce9aa291232ca9fc4beb65d98b53b1db4b7c252e60214d8899ad42af6c907cb52e83cd74cda9388f5302db069303d96a32f86cf575f43d1189d7d49bbec654e43cb64778fdbc1a80e13dad71bc4f2009c6af406a8f26dbfc5d0148d6c33524ab08287aff3f4b57c02c1c8f68ea5878bc23ebcd950944dd786e595c8344acbc9bbd29e0ca7036f26e9c0fc0ed49df103728f0025d4ced5507c919df26f052b4f016da86794ad6d8e62c5f23bb0bfa17c569a0f1cf8ae1faa77413b8e79b265c02d021ebf87b06be5d10eb55dd079380c863294a23f1b84cb84a7cdaa9ddd93279c9dca01cec08871baf5bd2a8bd0de91574d21643e4a6cafb719a00f3e8199037da82b2c04843b1feac9e7e219bf806110b404f63e1ed138a146ed489ed4db5d477154064750762bf9b8a3585e7c14ce2a728a299f994b6d8318402e12c6579deaed40b6176485593e2332194696e1db5b34487dff9568e84c54ed0210af826be1ff70be4f033d4c210967817bd49b42e28fb24df46d9be1ae84d1ce1cec22d885f7d0a4e584afd399c90e55019fecd9adf7b8b375418a0b58caecb2e19ca49daa990175201d8754f6e9eeb48e717a0a425cd9f8bfe7268537a958d9ff79fa7b10be4aff4b0ff33f9ec7966d6e4bb0445d7282f6ceaad5a88fab0677c387c65883620e5b25660bd51b45a8916f34a25dcbb2dd3517547c106dbe2127767693a200c85822bd8bfa5a17bd2d370aade44b3240a63a96bd7666ac636e379931e076bb961927f72f4db0c7cfd49f3ee5e1f9ef4aa9c0d5f7d69a96c0d65fc431e05308dd2482d40ea5e0cbddfa60d3e709368f03ecc4bd8479777f46f21fe152e18eb5056d5ab0ca352d9702b285c74bcd3713b45256c063ebc6d705345e4a739fee3b2f670f2897e69111dc354afe5a72c6081cb738042965c8710712ba4166ee3095126f389f36f9882f33a1f887d3ad31089eafaa678ddd4d351b675ae7e0bc2a8cc9fccdfd75533956f0afd77f7705bca9cd979b8398d78a25249fcab82a157c16fb7f29fa2dd1cf698ba9db05c49b48e79397d329fab67876a93817969a73b3bb642a71d274e2ded66ff9d1d727e2fa3c1fe540c0dd36619b434b96e9706e115d41003deb02a3476551b13ea0d14e76b9403858437beac258956a727cc20d8e97a94c78816e79819043eb523092d337902a4162cd40ae5d0a7bed38f27cfa86eeaa2ff158e8a4544167290bdf71b40242c9fb9b6981f2e664744b516aa2a914a867caa9b7368fd57f8a5d82da6f31ca60c548f69863f579a961fa581145f86db348d2de9c8982a3fba320695123324964ed906eddf82f35ed1c35b2a80a4f9f30794cfeada4d9fe569c9cd33f7333aeba4f17f12b8956f1be28cebcc3a25f8ba48a627d20337c61432389916a94f3c363cfaee47b84292a9a563e8b77ba6235e1e908b7f0a15fbd52656dc6890094b600856cda59090a1a782f39e95bd192f3a8771f3040b40cc53931b0a9e2a9b4bb83d037ced8c0ab32e27bc984c67729c1d8b7ab5dbe4f5106180126d9a71f1fd93164ee53dcfd7ee74fb16b61c8d434d40ff85cfeeec79ac61a27a2e7d6d6c82cc794d4b6becf5f50b7afaeb23dbfe86f985be1e2bab742cab649137a374cac985f522890a18dd126a645ea11b4bab24aa795582cf53e44b147a3c2de4f1a8c7761901d80530600f1eaedc301bc32a1f74ec23841391325c638afa20d0e7541535392d01d52896bb0f38afae756df617ede115e3089122a78cdf363bd07467857a86bc266a6860bed7865edcb0858c598e5d3083e2b751c585e3c5eb66f24fb6ac481837035ddfe84d8c9c055b7453b21800d536a4fac32511b1806b950518e4cc13012a2c9284e31f9c90c78d40815dbb6f30a31ecba9014be9c56df5951c00165609ac55874b7c7bf5028cd742ac2db4d5bd6b0d8bfcc554739934289bbce60f3e5391ddc1529360965ce9c6844e8157dc7c2cfc95206c4a278ee4f838c2691bfd0a4255ea589ab5010cb803c44cb34419bdab9ff1b0f717a91a82ab487f25274e8f8156da39b4f3d34dcb54b39916b1191816679076a526903e992737044e4b13a5da1d32bf99a4a83f10cbfb789f9cb1e3c8753e26eeb3b510dd5569899d2341707e6947e8bd3dac84b75030fb42ba07b3a5ef02929f790a8cf3efe3a923a767641e6364aaaf96493ff06c0aeb42be4117021151fcc452165acffd8eae3e57097fe7ee396ade089d9d4da5bbfed32c723bd42d645999155736a770dd7cb89ab65e785b615d52a7aed27ce89bb87a1ea7e188b76b8221a2d1d26a1de18d0d360aa262fc9d2da44848112ef141cbf76e8132579d1e8da6267ca0fb1362cf07bf5a586ab906484f9307c0da4c6bd4e0f595b3e6274afab91bc76fa72af5c1dfc992fffa7b77df24f22e5f370fee96c024ac1e7d6dd0879b576d02cb39c036658fff6583035d85821f207c627426bdfed40a31d085915f6afe35dfe38495c4fe95bf3bede05251915312572c29018d341678c440d24e93fd377ad968a9f9f7725bbbe0b9d64f11b04d553ba7b71a031d0fcbeb77af95c00e3a906a10d7c11f217cec42ed2ba80c0cfc02c5cf3cf3a69b206ced877811e1f7be3fd96ec20c407859e899a53c8e23311f7434e62cfd360a15cb3a402fac26e2366c9a386f385265c336dfe5e59754cfae3ed72ddf7093a50d0b41475dbfc33e56c9b3a7340a26970b70ab5eea2101ad42b7432d3b95bf8b76effe7635620893395875b670686beb36fe42086d72c675af1d5447e9d72376b587fd0c86783c34988c6388d2ccd5a6ff783efc3fc063e831b456c84f88428e420c2c611823c9d0aaae04759a3790d8fbdf4d87bade2c146c0beee3a8d0480818526adbdf914a683b6d940275a926b483a5fa1b1b0c0386d085462e1c430fa88b73d248494df538418cee63dfbc694f30b4a509aa6f2f64b679a0350c5061bcd25fb4b72b5296c0c20ddf1a39c691c9dd91ea57cf61ce1fa342f7299ebd4efa800d8e88a7cf2d9c3bab6724c9d521de727ae99da5da5bbc2c755c07425b7a11a6db39f136e25ba6e6090dd4bc8dafeaaf8cf33080c79ecbdcf316596232de520a4744d9c343bb1704785eb40bb84d5a41d56859d892b4af420bd55e5229e38a921887f974f09469478187712877e459"}, 0x1015, 0x1) [ 227.892015] EXT4-fs error (device loop5): ext4_mb_generate_buddy:744: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 02:52:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd864) 02:52:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x40000000) [ 227.988159] 9pnet: Could not find request transport: xen [ 228.020134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=10761 comm=syz-executor.0 02:52:20 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x5, 0x18, [0x9, 0x6, 0x80000000, 0x7fffffff, 0xfc, 0xac03]}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000040), 0x0}}], 0x58}, 0x0) 02:52:20 executing program 1: setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x6}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="e99a76e56861735cd86b8951e06f17856eafc574d1b59847dcdcb219d969b0129b174ce652bfb53d979aa4a4f10c694b61a22368eba2a85af4d2507fee53a99fa7f0f7d5a5cfd01558bdee63899dba3d5a62852b9b09d92d9a965d24cbd14ef67b0e4d950a7ce3e9d21a39091b11faa741a2d1bda5635e06997daba022952faab660c665d8b9807af276531e3ecdf330aa5df1993365e9964c968634c9627cf6fde9c8649942ef58a9acd84ac86229d0579c146c4162bf5d0bb562d865a3ab383b", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000c40)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0xd8, 0x0, 0x0, {0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xffffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dce8f517e517209d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 02:52:20 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd895) 02:52:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x6b6b6b00) 02:52:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f2734e3151fd55baafd01e"]) 02:52:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000020008112950f80ecdb4cb9020200000400000001810040fb12001800040fac57a12d19a906000500030f", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x29, 0x0, 0x0) [ 228.205913] atomic_op 00000000bfda605c conn xmit_atomic (null) 02:52:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x10000000000) [ 228.259203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=10761 comm=syz-executor.0 02:52:20 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f00000001c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=""/149, 0x95) sched_yield() write$9p(r0, &(0x7f0000001400)="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", 0x214) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)={0x2, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e21, 0x4, 'sed\x00', 0x0, 0x8000, 0x41}, 0x2c) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) sendfile(r0, r1, 0x0, 0x1c501) 02:52:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd8a0) 02:52:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x400000000000) [ 228.470919] overlayfs: failed to resolve './file0': -2 02:52:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x7ff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x3fe}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC]) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r1, &(0x7f0000000340)="004a0093e0cf002f781afb24be7182a3", 0x10, 0x20004055, &(0x7f0000000300)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(r2, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="0f000000", @ANYRES32, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0x80000000}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_ifreq(r6, 0x8916, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_flags}) r7 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 02:52:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd6, &(0x7f0000000400)="c4c691019919da078a0098d3e0c393b0400500000000000000000022addee07bee0e6333b5cacd893169b618322ff66020bb511253508b5a4496728cc7c448fc2362e0d268240e626171f8a79effea6529628423ab1a642656e3c25562876465c0fa52b8f347300900bc478b019a983189282e992e851a8f0a209c67db5a42213ecdc5adba392ad112395e1f23120da26677430ab4d18f7b492a7e56d291d4b9df55a57abfeb1977acff78fa650d811d4ecd623741df2f7a29227816e115baf27f24719a75506029a1e2ed28e13ea7b18f330c0bf532"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000140)={0x2, 0x3, 0x4}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x3d) 02:52:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0xfffffffffffef) 02:52:20 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd8ad) [ 228.725798] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 02:52:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x6b6b6b00000000) 02:52:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000000c0)) r3 = dup(r1) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 228.866903] overlayfs: failed to resolve './file0': -2 02:52:21 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 229.017551] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 02:52:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x100000000000000) [ 229.267478] overlayfs: failed to resolve './file0': -2 02:52:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd8dc) 02:52:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75a}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}], 0x0, &(0x7f0000014a00)=ANY=[]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in6}}, {{@in6}, 0x0, @in6=@private1}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 02:52:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) 02:52:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f00000001c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=""/149, 0x95) sched_yield() write$9p(r0, &(0x7f0000001400)="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", 0x214) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)={0x2, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e21, 0x4, 'sed\x00', 0x0, 0x8000, 0x41}, 0x2c) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) sendfile(r0, r1, 0x0, 0x1c501) 02:52:21 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1000000000000000) [ 229.444724] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 02:52:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1c00000000000000) [ 229.516996] EXT4-fs (loop1): get root inode failed [ 229.583324] EXT4-fs (loop1): mount failed 02:52:21 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd8ee) 02:52:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x1d00000000000000) 02:52:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f00000001c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=""/149, 0x95) sched_yield() write$9p(r0, &(0x7f0000001400)="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", 0x214) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)={0x2, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e21, 0x4, 'sed\x00', 0x0, 0x8000, 0x41}, 0x2c) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) sendfile(r0, r1, 0x0, 0x1c501) [ 229.854137] kauditd_printk_skb: 19 callbacks suppressed [ 229.854151] audit: type=1804 audit(1603162341.882:92): pid=10895 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/56/bus/file0" dev="sda1" ino=16094 res=1 [ 229.976391] audit: type=1804 audit(1603162341.942:93): pid=10901 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/56/bus/file0" dev="sda1" ino=16094 res=1 02:52:22 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x4000000000000000) [ 230.288752] audit: type=1804 audit(1603162342.082:94): pid=10903 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/38/file1/file0" dev="loop1" ino=5 res=1 02:52:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd8f6) 02:52:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/35, 0x23, 0x0, 0x0, 0x0) 02:52:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000002c0)=0x80, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000380)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000200)={0x4, 0x5, 0x2, 0x8001, 0x7fff, 0x1}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$sequencer(r2, &(0x7f0000000340)=[@echo=0x5bb1], 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 02:52:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x8000000000000000) 02:52:22 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 230.622663] audit: type=1804 audit(1603162342.272:95): pid=10886 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/68/cgroup.controllers" dev="sda1" ino=16098 res=1 [ 230.723693] audit: type=1804 audit(1603162342.472:96): pid=10911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/57/bus/file0" dev="sda1" ino=16112 res=1 [ 230.748578] audit: type=1804 audit(1603162342.472:97): pid=10911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/57/bus/file0" dev="sda1" ino=16112 res=1 02:52:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0xefffffffffff0f00) [ 230.810999] audit: type=1804 audit(1603162342.832:98): pid=10925 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/58/bus/file0" dev="sda1" ino=16114 res=1 02:52:22 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42110400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r0, 0xe01, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7c0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40804) pkey_free(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f856f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map=0x1, 0xffffffffffffffff, 0x17, 0x4, r3}, 0x14) ptrace$setopts(0x4206, r2, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$udf(&(0x7f0000000140)='udf\x00', &(0x7f0000000200)='./file0\x00', 0x5, 0x3, &(0x7f0000000540)=[{&(0x7f0000000240)="a6d47841f0f905d5f287968588be6ec9cf99831a42839b7e8bb2", 0x1a}, {&(0x7f0000000440)="c653ae0bf733b41c945de3231727d838c4f2b2a0d009ade072e37c60c211a6bf3c4c2a3de7fe1fbbf93f8188f32deccd931d07f14d48a420713b59b20f4072f0a51e7e428e644026cb3afba20e61c039431d4356547f1943334121b8b58a719f54ca04028aad38c733f5b06c24e20072522eae4d710b88356aa2b57516d88b2b1c0283b966a7d25f0cd89be519200343c0d574c9c412be2d3feb2bc36d9f22309d61d83cb4fbb3bdcfe29f887498bdbcee5dcdef9202c3b607a923a56e6dc94a7ae45c5e50813acd84eacf8903cee82d273ad959629893f560feaa", 0xdb, 0xb36}, {&(0x7f00000002c0)="6c28f1c8c000c7122f5553755886d08a18b70efbb047d7bfceac173fa154e347ad83425f32d3f339437c8afc41c559816eeef7f08583f258759d668ebb010732f9236604243dd897d8ecffad273b6f061b561214681dc9fdf97164139a02968f12f0f0d4f8a163ca531f4b230927778bf9cc297fc989abdf6f86a881d4572074b05e0b0d", 0x84, 0x4}], 0x3001, &(0x7f00000005c0)={[{@shortad='shortad'}, {@lastblock={'lastblock', 0x3d, 0x9}}, {@utf8='utf8'}, {@nostrict='nostrict'}, {@gid_ignore='gid=ignore'}], [{@fsmagic={'fsmagic', 0x3d, 0x71f1}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}]}) bind$alg(r4, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) [ 230.863237] libceph: connect [d::]:6789 error -101 [ 230.869036] libceph: mon0 [d::]:6789 connect error 02:52:22 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 230.904250] ceph: No mds server is up or the cluster is laggy 02:52:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffff8, 0x0, 0x6}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8c0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x406, r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xd811) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 230.948721] audit: type=1804 audit(1603162342.832:99): pid=10925 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/58/bus/file0" dev="sda1" ino=16114 res=1 02:52:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0xffffffff00000000) [ 230.996582] ceph: No mds server is up or the cluster is laggy [ 231.008019] libceph: connect [d::]:6789 error -101 [ 231.013140] libceph: mon0 [d::]:6789 connect error 02:52:23 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 231.107906] ptrace attach of "/root/syz-executor.1"[10947] was attempted by "/root/syz-executor.1"[10950] [ 231.134782] libceph: connect [d::]:6789 error -101 [ 231.139846] libceph: mon0 [d::]:6789 connect error 02:52:23 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42110400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r0, 0xe01, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7c0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40804) pkey_free(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f856f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map=0x1, 0xffffffffffffffff, 0x17, 0x4, r3}, 0x14) ptrace$setopts(0x4206, r2, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$udf(&(0x7f0000000140)='udf\x00', &(0x7f0000000200)='./file0\x00', 0x5, 0x3, &(0x7f0000000540)=[{&(0x7f0000000240)="a6d47841f0f905d5f287968588be6ec9cf99831a42839b7e8bb2", 0x1a}, {&(0x7f0000000440)="c653ae0bf733b41c945de3231727d838c4f2b2a0d009ade072e37c60c211a6bf3c4c2a3de7fe1fbbf93f8188f32deccd931d07f14d48a420713b59b20f4072f0a51e7e428e644026cb3afba20e61c039431d4356547f1943334121b8b58a719f54ca04028aad38c733f5b06c24e20072522eae4d710b88356aa2b57516d88b2b1c0283b966a7d25f0cd89be519200343c0d574c9c412be2d3feb2bc36d9f22309d61d83cb4fbb3bdcfe29f887498bdbcee5dcdef9202c3b607a923a56e6dc94a7ae45c5e50813acd84eacf8903cee82d273ad959629893f560feaa", 0xdb, 0xb36}, {&(0x7f00000002c0)="6c28f1c8c000c7122f5553755886d08a18b70efbb047d7bfceac173fa154e347ad83425f32d3f339437c8afc41c559816eeef7f08583f258759d668ebb010732f9236604243dd897d8ecffad273b6f061b561214681dc9fdf97164139a02968f12f0f0d4f8a163ca531f4b230927778bf9cc297fc989abdf6f86a881d4572074b05e0b0d", 0x84, 0x4}], 0x3001, &(0x7f00000005c0)={[{@shortad='shortad'}, {@lastblock={'lastblock', 0x3d, 0x9}}, {@utf8='utf8'}, {@nostrict='nostrict'}, {@gid_ignore='gid=ignore'}], [{@fsmagic={'fsmagic', 0x3d, 0x71f1}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}]}) bind$alg(r4, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) [ 231.175593] audit: type=1804 audit(1603162343.122:100): pid=10951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/59/bus/file0" dev="sda1" ino=16076 res=1 02:52:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x7, 0x41, 0x10000, 0xffffffff}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x12, r0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 231.403708] audit: type=1804 audit(1603162343.122:101): pid=10951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/59/bus/file0" dev="sda1" ino=16076 res=1 [ 231.437520] ptrace attach of "/root/syz-executor.1"[10972] was attempted by "/root/syz-executor.1"[10976] [ 231.667277] ceph: No mds server is up or the cluster is laggy [ 231.680975] ceph: No mds server is up or the cluster is laggy [ 231.687561] libceph: connect [d::]:6789 error -101 [ 231.693418] libceph: mon0 [d::]:6789 connect error 02:52:24 executing program 0: clone(0x4308980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffedd2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x44}}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x290, 0x290, 0x180, 0x0, 0x288, 0x380, 0x380, 0x288, 0x380, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'netpci0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x9}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x68}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 02:52:24 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = dup(r3) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000040)={0xd7, 0x8001}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r6, 0xc0287c02, &(0x7f0000000040)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x80040, 0x0) sendfile(r3, r5, 0x0, 0xd811) 02:52:24 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:24 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr(r0, &(0x7f0000000040)=@random={'system.', '\x00'}, &(0x7f0000000080)='/dev/net/tun\x00', 0xd, 0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) readahead(r4, 0x9, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) close(r3) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x8001, 0x80, 0x5, 0x5}, {0x81, 0xfd, 0x1f, 0x8}, {0x4, 0x2, 0x0, 0x7}, {0x6, 0x4, 0x7, 0x80000000}]}) 02:52:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000002c0)=0x80, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000380)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000200)={0x4, 0x5, 0x2, 0x8001, 0x7fff, 0x1}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$sequencer(r2, &(0x7f0000000340)=[@echo=0x5bb1], 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 02:52:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff2b}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4008841) read(r1, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000203e090000000000000000003b250000000000000000000a08002a000400"], 0x24}}, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000200)=0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 232.049229] ip6t_rpfilter: unknown options 02:52:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x2}, 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1, &(0x7f00000000c0)=""/31, 0x1f}, 0x40002120) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 232.098110] overlayfs: missing 'lowerdir' [ 232.130851] libceph: connect [d::]:6789 error -101 [ 232.139734] libceph: mon0 [d::]:6789 connect error [ 232.148388] ceph: No mds server is up or the cluster is laggy 02:52:24 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) 02:52:24 executing program 1: r0 = open(&(0x7f0000000240)='./file0\x00', 0x109ae1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'gretap0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 232.213121] ceph: No mds server is up or the cluster is laggy [ 232.222910] libceph: connect [d::]:6789 error -101 [ 232.250936] libceph: mon0 [d::]:6789 connect error 02:52:24 executing program 0: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0x88}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf254200000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000600000006000000060050505050505000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600f7f046256c6800000000"], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) [ 232.292707] libceph: connect [d::]:6789 error -101 [ 232.303918] libceph: mon0 [d::]:6789 connect error [ 232.339456] overlayfs: missing 'lowerdir' 02:52:24 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/ptype\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0xff}, @fwd={0xc}]}, {0x0, [0x30]}}, &(0x7f0000000140)=""/108, 0x33, 0x6c}, 0x20) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8e00, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) fadvise64(r7, 0x0, 0xfb, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0xd811) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:52:24 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9, 0x1920}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@empty, 0x45}) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x7fff) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x3e000000, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x1, 0x8, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x64}}, 0xc0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 232.475772] overlayfs: missing 'lowerdir' 02:52:24 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:24 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x105480, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x14000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000006c0)={0x3, r1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$romfs(&(0x7f0000000200)='romfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff00, 0x4, &(0x7f0000000540)=[{&(0x7f0000000280)="62931258c9da6bb810adb0907b82da51ab049a15f6e6fd14428035662ed65cc1a69e621c970a5862ec9c90d03ea0c18b620d5dcb131656c6e4ced06f8aaaa97348bdb9464e7bc67fdcb60297152cc8", 0x4f}, {&(0x7f0000000300)="2d81edeab22267078e5c626b11d027f7e667bbfe31f40cb546a8c0948a54b0a9286567425249238ed926f47b2d63a0254118a09ba00ff4fcc6dd1bdfc988aa9d25ccc56128de224daf7544c434fe2dce3e6ab85e0d0a83b16a89fda7", 0x5c, 0x3}, {&(0x7f0000000380)="aa6b3624a09e6e8e07fc665d257b67330214224418c0e5111147385df3409f82388595933f1a6f8d0612982335472cf424b05d0166a8b40f0aab2ce95e931b1f8a656f66c327657025ee02ac7f8f8999abb9a4fde378876454ce2a67c966019e1b61a0c85c25ee08b7a299bef1983904ae656d49fab82dab4043f37b3fcab880b5f108f9", 0x84}, {&(0x7f0000000440)="53767ebff20640165d0ed6d05f4384fefd4060d529b0de4e3e9a44bbf8ce1c6e2dad12537e91fd0b7a5887395951c64e983d78567841ce110b57d4832a577b94ad9c3a128e143e92046e5aec5c3ed1153a6c7e7e94d94fff8a29feb6c8b11f15d6a41da47e9de72b9fbd78b29b678381e9332b8ba590e7d9986cf634755cf5c2bf678dffc06aea94bfa47653ba01cf027c36b95601bfc1f0ea20e02e77359a07364248634246359335f758454c32cd6d72fcd3a76fe40c6736712de68ba77e429c130bf71ddb1ce5b83fb8e36bae13573630db19", 0xd4, 0x100000000}], 0x8, &(0x7f00000005c0)={[{'fdinfo\x00'}, {'*/:%^\x00'}, {'fdinfo\x00'}, {':\\-$'}, {'syz1\x00'}], [{@subj_user={'subj_user', 0x3d, 'fdinfo\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}]}) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x1, 0x0, 0x0) msgrcv(r3, 0x0, 0xffffff64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000010) msgctl$IPC_RMID(r3, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000700)=""/235) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000900)={0xbf7}) socket$rds(0x15, 0x5, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x31, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xff}]}, 0x78) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x68, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}}, 0xc000) [ 232.617670] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 232.640787] overlayfs: missing 'lowerdir' [ 232.653601] romfs: VFS: Can't find a romfs filesystem on dev loop1. 02:52:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x4) write(0xffffffffffffffff, &(0x7f00000002c0)="c3d93e2765cd76a2c89601bbdf84b32cf0232c9c785793f18b60e06fd3802955fb056de2c7ce3d074b5898a0063863ef437c5cb1143ef565b367b4d4571fe771cf52245459e00acc252e6376aea536b7f6ce0700000000000000a76393cff3651e31cb5ec60000000000", 0x2d) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x9) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 02:52:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0xbf38, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a2aa52d52f15d82d74c86dd3dc01811a8ad0d7675c343afbbed3850be6b6cfc7518b17aebe543d6fa87944260c8d0ab184293405172a51d4d781bb39f6762123ab1c472c3c156d3e04aab71319b3ea1b899cdbeed1ebbf8199ca18169c20eeb354279e98add736999b17a99d2e46feff213ac2c82322d184a5cbb02745ddf7cc891cf6fe71a073a98f54572eb541301103b89b0375c5331bf49083e86cc4a32ffbda092ef2c332dc9f85e79aabe14c7cec89b5002d9234d85ada3cdcab3e58ffdc79574ad4a4fc7ba8fab5c55043fa2f65dbc7ffe2f1cdecb6f9d36c286539df91ba403b8f9438c327d504665ef53ce2cd4d990707fff652ffccbfd330", 0xfd, 0x101}, {&(0x7f0000000280)="3264dd81e7a975f34d7ab26505e58b5c19e41cc130633cb241ed3f58fbeccca0f7c9ab0eba5bcd32b7d007b67e74517bc001ef5a4e7c0eede036a7440acc94693977144a9cd5de893f4fe5b51c345848731a8d57ff0307c9be4cb4d31292722870d991271e0556b56e61960a941cf77bf8c2b2a3023c8c8614b10278ce03bb286ce1e33290e6746f807a7a3d736efcc8bf2dd934e43365", 0x97, 0x1}], 0x0, &(0x7f0000000340)={[{@flock_local='flock=local'}, {@autocell='autocell'}, {@flock_strict='flock=strict'}, {@flock_local='flock=local'}, {@dyn='dyn'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@dyn='dyn'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/proc/vmallocinfo\x00'}}, {@obj_role={'obj_role', 0x3d, ']\\%-'}}, {@euid_lt={'euid<'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/vmallocinfo\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/proc/vmallocinfo\x00'}}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) [ 232.839105] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 232.865494] ceph: No mds server is up or the cluster is laggy [ 232.873170] romfs: VFS: Can't find a romfs filesystem on dev loop1. 02:52:24 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:24 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9, 0x1920}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@empty, 0x45}) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x7fff) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x3e000000, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x1, 0x8, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x64}}, 0xc0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 02:52:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 233.061170] overlayfs: missing 'lowerdir' 02:52:25 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r7, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r9, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0xa4}}, 0x8080) sendfile(r4, r5, 0x0, 0xd811) [ 233.281937] overlayfs: missing 'lowerdir' 02:52:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000049c0)=""/4107, 0x100b}, {&(0x7f00000029c0)=""/4066, 0xfe2}, {&(0x7f00000019c0)=""/4085, 0xff5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 02:52:25 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x5}, 0xfffffffd, 0x40, &(0x7f0000000040)="0e21c5a6d643d1e8aa35902e515898c9dbf97a689a3a01cb70e4d1d764c4364c3da9c4d2f9e91ec50795e49f2d40d8f3f5ce896aa804a25ccb34d7ad99448065e182e94cd6f76d1b69b8957cb45e6525b3727cae9ea8d54f0f490c70cfc4abcbd52e6c33477ce54a577e3754fa514141e670a54c0635a8b26fb0cd089ddf89b380e90baac3dee94cdd85857a2309e79a489f85c4485296ea1f1d365b03cc8ed2db542af04dc32cead4f0c5c93556eb88b769a641c29ffed077a71a4b2aa6b4783f9590", 0xc3, 0x5, 0x800, 0x3, 0x3, 0x3f, &(0x7f0000000140)="d430e6d4a2143ecd012e78923832814dd696b20d7a039124e872f50cd2e0aded38bc9c80543c6898392840867b", [{0x100, 0xff, 0x200}, {0x28, 0x9, 0x25dc3433}, {0x9, 0x46000000, 0xfff}]}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000300)="e856940b4b7290e11733f0f79bc50635eff5326aeeb6c4d98c623c5f7a7433d2e24aecd9e464dec9c9205574c2", 0x2d, 0x3}, {&(0x7f0000000480)="65dc5711cc6133a473cf2aa964f8d5345aa48e81a56ad2f19022d7bde71fa912f9de300d153e08206fbb30d09f60d013960f397f21986c4f6194c2318909f1e936710c6611b6a32ee3eee63d5681f7f7314ab5b9fe917495dd448a8919612738208dee13610c486a4915cf1ea2ba49ce1a902521c078cce0d1d80cef841142e581486ded05f92a7d07867e0b4c69f3bbb1606738cfffd3c101a37f758be2e51616aac2d4498bbbb7670590a1c61caf50bac9e9", 0xb3, 0x6}, {&(0x7f0000000340)="8ff02df9c7e193bb9b0eaac4860bce86539e52c5c750976eaecc794861cb760867e45c3aae2dd4276c0a49b26df1c30b", 0x30, 0x7f}, {&(0x7f0000000540)="89ac854c5a24810918710f8bc5ccd93267347124f7d18e7bc83a0434c618475f405ea258a1bfdd88bf2619573a590e170b304313a7419f6be42db7e454ddcf0c9d405cbaed6bc73968259ab112557d7fdecc27cd1502d144903926e87b9cb65a", 0x60, 0x1}, {&(0x7f00000005c0)="746cb77a8bde917aea3a7d47e40b80fc61c1e41d2db60bfbe21903aecf74551d0694e7d8103457d2f9cc638318cab0497f273bafb7f65ec0ddfef4a5920efb22765c48868861aaa6183fb9ef008e35fbd054a572b6872b5578c402c11df4eae9536738782929544cedd21264c4cb53091ec7acc97a1c1dfc54d537ea4a01d8556de886226cf663cf1a727c69f723e0780bd7d4ae795898833505654955fa9d5bb15ce453e11a98eed01cc61cd0d7cc0cb8e2a6157327302541bd2e909f1b00b1c3", 0xc1, 0x7f}, {&(0x7f00000006c0)="5e5831b7d2130b7016bb25a3adeaef2e3e203bae6d47d55ada6022d20ba2a998007dbc35619f991cb312739576334648fe219c905cf35eae7f7fda4d58f4c827794379085ca56bd9648cafe58320fb90a55039752d57b949e08d2f27943b09f7570ccf3f2f86eea5f5b8eca74390521b64d0d27a5f737b08302c98ed686b26eeb497d376fde15fccde3f7ebaac5f6017d12e85ddd3bf85eab5cdaad7141969d9d04a2c6709b907f522814744b9796eae4ade4496a360f9a3d8eeaffb648be959ce616852885761ba527add1d56ca07e972", 0xd1, 0x3}], 0x400, &(0x7f0000000880)={[{@map_normal='map=normal'}, {@map_acorn='map=acorn'}, {@map_normal='map=normal'}, {@map_normal='map=normal'}, {@check_strict='check=strict'}, {@nojoliet='nojoliet'}], [{@fsname={'fsname', 0x3d, '/proc/vmallocinfo\x00'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000900)={0x3, [0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0x2c) sendfile(r6, r7, 0x0, 0xd811) [ 233.567997] overlayfs: missing 'lowerdir' [ 233.586272] netlink: 28383 bytes leftover after parsing attributes in process `syz-executor.0'. 02:52:25 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 233.650686] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. 02:52:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000049c0)=""/4107, 0x100b}, {&(0x7f00000029c0)=""/4066, 0xfe2}, {&(0x7f00000019c0)=""/4085, 0xff5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 233.804754] overlayfs: missing 'lowerdir' 02:52:26 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e26, 0x0, @empty, 0xfffffffd}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) 02:52:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000049c0)=""/4107, 0x100b}, {&(0x7f00000029c0)=""/4066, 0xfe2}, {&(0x7f00000019c0)=""/4085, 0xff5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 02:52:26 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xc0, 0x2) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) [ 233.998841] netlink: 28383 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.028575] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. 02:52:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f00000001c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x2cc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x5000000, 0xffffffff, 0x80000001, 0xd7}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c500) [ 234.148170] overlayfs: missing 'lowerdir' [ 234.166987] netlink: 28395 bytes leftover after parsing attributes in process `syz-executor.1'. 02:52:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:26 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 234.195209] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. 02:52:26 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e26, 0x0, @empty, 0xfffffffd}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) [ 234.360290] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 234.401085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:52:26 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) sendfile(r4, 0xffffffffffffffff, 0x0, 0xd811) 02:52:26 executing program 1: syz_mount_image$qnx4(&(0x7f00000000c0)='qnx4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f00000001c0)="683051d299974559c3f27a5c2d4d", 0xe, 0x1}, {&(0x7f0000000540)="71d9434e7eb375", 0x7, 0x5}], 0xa0b000, &(0x7f00000005c0)={[{'mountinfo\x00'}, {'mountinfo\x00'}, {'/{*}^*+/'}, {'{$'}], [{@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'mountinfo\x00'}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="740000000500507bd7c7817d1fa87ec47e6a9416c05a81edbb0b41ef3bfdeea5444066666320082ba45b7cb901fbdb0942ce7af26d0e7ed1c425f9d55ca5e1ad745a2df000adeed4ff7c39e640069ea98e5d282d5327c09b9279c47b560a8e8a2b4194b8099357c0928c65b53166a33b844b287585d03c"]) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x4d80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='\x00', &(0x7f0000000680), 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000000001000000265f1d9ec6c185000000000000b400000000a94540d85fb04efa59d2a00fc9f82ff6b44c7b94c04a16d9d1fff2fd0c228091d66bafcaa5fa2b0845346092b32bdef4bd735b48f5a6ea64d3c6897bbd342530290ff0320a1b97bbbe14fee2828942de87e2eac62667754fff328591e32b4c6c3c", @ANYRES32=r3, @ANYBLOB="00000000000000000300000009000100666c6f77000000000c0002000800010000000000"], 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 234.817368] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:52:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="4b46a6000000000000008ed60a83"], 0x14}}, 0x0) [ 234.863510] kauditd_printk_skb: 26 callbacks suppressed [ 234.863523] audit: type=1804 audit(1603162346.882:128): pid=11217 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/71/bus/file0" dev="sda1" ino=16149 res=1 [ 234.905186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:52:27 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f00000001c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x2cc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x5000000, 0xffffffff, 0x80000001, 0xd7}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c500) [ 235.049488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.070127] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 235.128703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:52:27 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3c43, 0x81130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0xe53}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0x9, r0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xe) syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = open(&(0x7f0000000080)='./file0\x00', 0x410802, 0x22) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0xffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd811) [ 235.157829] audit: type=1804 audit(1603162347.182:129): pid=11242 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/72/bus/file0" dev="sda1" ino=16175 res=1 02:52:27 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x498edb26) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2a860, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any='access=any'}, {@cachetag={'cachetag', 0x3d, '$\x16'}}, {@posixacl='posixacl'}], [{@uid_gt={'uid>'}}, {@fowner_gt={'fowner>', r4}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) sendfile(r0, r1, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r0, 0x0, 0xffffff04) chdir(0x0) 02:52:27 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 235.280816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.400200] audit: type=1804 audit(1603162347.192:130): pid=11236 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/78/file1/file0" dev="loop0" ino=7 res=1 [ 235.564137] audit: type=1804 audit(1603162347.212:131): pid=11242 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/72/bus/file0" dev="sda1" ino=16175 res=1 [ 235.586865] overlayfs: unrecognized mount option "upper" or missing value [ 235.588947] audit: type=1800 audit(1603162347.372:132): pid=11253 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16093 res=0 [ 235.618216] audit: type=1804 audit(1603162347.402:133): pid=11253 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir623782830/syzkaller.tJ9tuQ/78/file0" dev="sda1" ino=16093 res=1 [ 235.688004] audit: type=1804 audit(1603162347.542:134): pid=11257 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir623782830/syzkaller.tJ9tuQ/78/file0" dev="sda1" ino=16093 res=1 02:52:27 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:27 executing program 1: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="000440000100010024000000001c08108f13", 0x12, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed415cf9e0000000e6c2645f5303", 0x78e, 0x880}, {0x0, 0x0, 0x9000}], 0x0, &(0x7f0000011600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x511481, 0x0) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x2, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) io_setup(0x2, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0xff, {{0x2, 0x4e24, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast2}}]}, 0x190) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="0065ffff017be8b6d3e3fc41994830302e4c800000"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) unlink(&(0x7f00000000c0)='./file0\x00') write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) [ 235.808080] audit: type=1804 audit(1603162347.642:135): pid=11264 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/73/bus/file0" dev="sda1" ino=16098 res=1 [ 235.834132] audit: type=1804 audit(1603162347.642:136): pid=11264 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/73/bus/file0" dev="sda1" ino=16098 res=1 02:52:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) r4 = mq_open(&(0x7f0000000080)='%,+\x00', 0x40, 0x42, &(0x7f00000000c0)={0x1, 0xffffffffffff33d8, 0x44, 0x7}) dup2(r4, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd811) [ 235.950086] overlayfs: unrecognized mount option "upper" or missing value [ 235.958469] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 235.996783] audit: type=1804 audit(1603162348.022:137): pid=11272 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/74/bus/file0" dev="sda1" ino=16177 res=1 02:52:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 236.224814] overlayfs: unrecognized mount option "upper" or missing value 02:52:28 executing program 1: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="000440000100010024000000001c08108f13", 0x12, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed415cf9e0000000e6c2645f5303", 0x78e, 0x880}, {0x0, 0x0, 0x9000}], 0x0, &(0x7f0000011600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x511481, 0x0) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x2, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) io_setup(0x2, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0xff, {{0x2, 0x4e24, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast2}}]}, 0x190) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="0065ffff017be8b6d3e3fc41994830302e4c800000"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) unlink(&(0x7f00000000c0)='./file0\x00') write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) 02:52:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:28 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="73186ca52aed6eaa61acfe7ca989063926108647efd9d2f229bc4fc7f9099e4c203b31be0e8b870a13e08832639c9f6c575d57b7319ff3cafd40c17efb8b341a223b87c6cad250d8320b6eb39e7de20ec2b3eb1addcfb904", 0x58}, {&(0x7f0000000180)="03e5b21f7c4c357a41a218d622c63b80b5676df90c1579535ebb634d199c96e816efd86c844a24c334e91efff0fcc2a353e588bf8ac1cf8a37ac3197680d379262d9a1dab019876af0b5ec4f2739dd4eaab4f05d1e79308039d699adb43fc2e721176c673fa41f70d8be35fdbed5d66e7aa37ac943b331911be9b0be4671c3bf550473080d90170c414b26329f31ba550a77a5ea04af91cf4d4f7fda4db41522beb533b246597b0979a0b724ada1dd77ad652395bfdca53c9c12580d19d632b3624c1ee31adbeeb664df5c9923decb563092671c1e285eed184d9bb3bf5d89c0152c9d30c9ac92a4afb8add8d05e", 0xee}, {&(0x7f0000000280)="14ff3c706fb56c384314679c5872c88a4f6ede96d3a549dd2933afbdb536107f33c2bf8787ec3e1cf81dd35bc5d04173947bdf8b38f40229d8ff8cb6dd20cc96996505853b6b6f262b10666a9dcd4550b1f6de17212faf4ec06dabbbe74ecd5146b4d82ba414bf7a5c9e59f028a4892b237dd417bfd69c1e445edc3e0c82be78baa22f8f54b5bb4d535cb47adc87f2613622499757f6ea7b3bd5ec2789bc9c49c002043b83361d37ffdbf6a1d82487e2f81f3e74d4", 0xb5}, {&(0x7f0000000340)="e56d0a8b81f8d201e32cca5530eb4cefc06c0d4034f8689ebdb482a7e3da6fd424ea58262cc550aba2d26ca3cdae5fde4d81a403e02a7f082535c814805a73b6b8c2c3ad8bb548746748c2c224c9dad79e40a5c9df69e50d071458af88dc", 0x5e}, {&(0x7f0000000500)="b2bec84856ef711456a705a659ec39b6fb26d97a04fe0989d10edfc2b8ab4da87f28e73c4d02a40f34e837e98fab33c8cbca8af79e9ec721ce7f28c0c3313af97be999760c80e3ce9404a0cb0d4a8d1d7a7276aad552b303653025601e56629333c1202ca959f1981c89e99012355781927879d4f499ad50262679b318e9a56c524db13d7fdad8e9f5ad0b67e22d97acd23df95e1b1f75eb9ab21dc3ee27d2244f03307f27ce3cd3553eb8a5548521f892214a4d681ae96e4b6c6f75a1c30b25bd2be317a2730b1886f835d874f65985e231c9eaec1b541eaae0fcbad9efab047f20d6bd3534f7ad0f3a77a64fa7c336920f78c2ae74fea7198e1b3d2e437a8ec2ee46a656164a319dd33555c5786dee33cb94fbfbb93b8ff87083f45cbdcc96501e04a5d0349071a5ef373eb0d1f8e85b3f8570fc622e4240fd95ca8d3e63e0a19b296a9f54b3c65e3eeedd2cfb754e6118410b3e96d051ac2ad74615ea73c0cd3827acbb558575c3edb8119f3b4f80678e86f06d1dee6c78a8c2dd923c0d560e49559aa18a321355ab62e5223f15b5d2bdea7e82d08bcec70dce3b1630ee04588d24482b6c662ac3c55632826984707d402bd40852f2b9a76cfd8e4172ca80d4d12dcd0ce1d58c9ddac12430ef1767d938076a0a03a92e621d4f2bc2ef312e7209ba868736dc5623e66333d710ef87fb21f9fa45172d16eb840ec3f0ad8c30401e907194af572b726fbf06891d04e79b02223f0ff5d4ffb344b60fc59a9c57465af85a4ba75c0efb9b3d31533b0b4d3b53fe2f24d959c639ba6f91b26689baac08ca3bb971ca770403225ea465dda4866a7a924fad5bc81f0ec7ca38c321270c2a6098faafab26f9b2d131324ea16fe7a7b22babc4de5684a3b070bcede3cea84ecbd4f3112c2255af915189c504d8219841f43968ac01927e6c25165c38919e6b33f6ff669e20d268d8db85a34e6877ce38fa9adf70cb5be8267589e5fcb8329e6cd52ef9eb0e4391fd10c398f35df94da62266b932fcb2178dd90ed55b6ab48a758744e2ed9fdb6e843158599b036c6b67d6a6fc21760840a9525baa343e8a2ca020c981eb8254a329624912a61f518b6cf98b7e1ea297e1e460ca9442c2127e19c4b21b0e5af7e91c2b061e1f7f891045e576a0c507eef8561721fe408a6d111034641b866901b160bf39759d1cca24ca78afb718e405204050a21ef49f92cc11d1a99adff89c54648d43a5b255f3a1255c52363fa4977ca62eeefee5f18eec4c83603c358445bbe16042b4d63e0e2ebfc73722546d20ea791f90eda6a5744a03e148ec2f0b40815b99218caa9aa9e077718dd0b84b4baaaeedc5f9641ca19e7bf34f1f5533b913fac6b0d8656347b88fd9f21c6663b7056f8f4cd1ef01a64fe847ac98cd88a715fcaf18238b2e279e09f757d0b0b4acaaa99b62475ef39091b493430c27e53c5f732cbbe01ab27eb601a873bb3a93ef52326ad514927af07f5878da610abb7d5806154fe2fc1cfa19e923c85c4970784614df1a374d91894496cc1c52f6e8ed522c2e2810863bac670b554b913272ed0f74516dc5a6dd3a5b965f2806e38a54c526ca6ea6058fa2b40b21c67d99923c53642927dffdf9afecfb7103ae443a3fd4aefa6af94c20448c1b715cb9026f3eb54c93c7cb6f8247d96978380299597042491d846d912c10efdd528ea4b54e19084c935c43b3b7c40a78712039f6b1fd1cdbe13c67684bc353ca26b72e76d9d66984b6b393a70db2128d82eb1f3fbb134857f85551a9119ae84321af599a6006143a120c51b4299a5a95095ef5f0821d84862f3eb1b0d5c1c88b4e73b3d882ce63d4fc12b8984c51ea8b2fa25eca7e24ec62f603c9718bc896a1be320c5dbdd20a3215ebab4cb0a76fa12d05b5fb25dffd786d39b53ab9fdf11a3cc93dc9ff2997a487d85d4e10674c87d5d7371387161672be6313e5f769a75421dd46a97b6c3826f15fb168180ebb79be3cd4d8907b597e6a48475e8609f4d17111c9b5333396eccff9aa84ba3255c17f8ce32203209f75850964e73aa71151193051e69f79b193eb3c780c23f922c086ed6e9c52a37e958f380f98a758e966caa85fdd8d2ea34bcae02158f6370fd72a62edb2bc95b8c9c66b89d2b53c71d9c5a43f8d5fa58c68e7e5fcf71e5b9dc98c0ddf64dae161ad5c9fb7eb5e0a11cb23d916403b2ccb714c28a2cd51743dbbdb6ec9e79195c82985d4781bdf05e0c37e4c08c28184937cafc7f3cb18dab0dd4e57ff9405d2cfba4a3976d9734fb167f8fdb669a8cf8898dbb497a9cb4bb1855e49f023055f9cc45f68f30fcdc668f5fb9011ca02da498147d2f58ed577c1202e82e80227d3734e76d35bce6232f7df411a854550d7903899a296d8e8caa0c0edc308b2a38560c414df7fe530213eab0c10bf560f1394f0e24baf4222953d717a2013dc3a64a07c01924208afd8044387048700d9a507a8bd6f35084893545b6a78ec9a1d62dc9db5c42c429d83538033e3655cf171e24c9091db0c198ea5ea12c73e99fda2eeaaed557728080d39f05730c32e7ee22df50a9f526eaf688283ec5cd0c83e5808acadb390ee90a53e637309e5a2bdfa197fdd187b86cef19363ae9d8bc3d6cadb8bd100710465001ed18da7f15f9a190de2c79beea073cde5bbc5eeed38872c55b7d78c646d6b94d600f8112172f1693498d717004061b7519897595a90eeef3c3f84104480576c1880523be0a6d531068839211f0b76d2d325e5f616ab254e50fd714fdd4fd6d9e5dd8a2b8d07db3b2ae89c712e8f4d7da913824424476c26855353f531a7abcae95f4fc1c98e48738a91dbb3fb5a176a51c37f5cdc187c322472f004cdbc113c65c56c332e20ceb34fac975f48e674f344d30d1706697c90e66855f47915b32be0be1b64addd13af35dae765629a222acec0dec5cd15d1fc78bd2e1938fac699cf4d2b4b3a5ef7e1a3d28dcf0b8726a07c68c661bba13876c3e0eb66eb30c240cb5808ee2aeb696332c371cdf78f5f03c9aadf6d0bcc41fcc769817e864caa85990894dc2f2965529ea1df7959b5e2a850b16fc1f8b208ba93b96d4f33e045427bcfe59f1cdb14816bec0777dc5c5b074a66d752cfe578a4ec50c1b0fb925b2739cc229b60be7bade62bb209f8a89a885e43267a4f926678008a509081fb55b672a4a3940e2721b6a7cd254884071e6cea18e238c4f062bcc2006437815e8c0f4a92de05a22def0d6abd1487dcb587b2fd538974e5d1a62e78638b16457907b39e51e3cd6d167c1180c9b405369caaf19c5bde2f40e841b32b376c2a6e1173266d55c465c6a6bbd8a4352c6322808e1bf439c617e657c1d47f5996b911a80a7921b04c2bbdad121ac35471c67304bf682ade1f4688288d570d1f19e8f6ff9c99f421dba39b89af6ff1d109d4ec36b52d08856565a46d816eff4c557068ea5b200cc3ba5464b6ad223a70d2e8d502d1d9a52a6d7163f2a5f00d3cec797b425c79d9d70ec9b269ff8687b4ecaf516f6040e2febb10d4e7ebd065bdb71777643d7188565547ed41fc9b11d7a150d0e2b3a74e09fefe25fd165ef52bde69c9db7337ed3d53c2de9a226945fc218343f73060343088f4b0c77c400bdc0cf1d6b38f6c8f877f167cc10cd01615d4b9a593f6b1c721950814d93c0264d4bee5ace1679450ec1ca8be895ccb4507eb6784867cc4e9edb2a17d43d9df4b9539fa2033bdf3e0616df438b50a108016b9df9f869c4f4c2fc753943a3df9821948ebdb2630a0264642cd239bd7c332f5857b83182a6a59d2e7a8b96c85272c1feb41ceb3cf847b33d19fc39c4f25408c1c60f88e8bd789d22476f59c2d710225d7bd1998429d31ae19975ccc55d8b47f0ae408db452623b9441996f366c6f0083273fcfcf4f94977daea393a3a8a72453711cd590d8d23f8184efaf6fc8f547e27d53015242e7734a91bd9397f814afda3bac624e3bd9ec59022a8563e0fb906ac1c169e1f692d57cbe9b32b75636bbde5059a713bedb0b502cea9e33a0c5a66a555b5fb4969556ab6a42f3590e3cf8a1d43eccb4e52ac3224e19921451ecca93e6cc61195c756c7f255cf6d51449d5f1c16b0a7e6bb476ad553c6dee382730c2dff58a73a3aa030fc3469114cbec2361e7f888517ccfb057582b6644f03fa9e1ff48df63f98c01d37ad4f74452a5d58830dc25ccec4be424bb7f78470cf7ed6462d090207ac87d6fee22308b6f0c574eb4ac1d8006d7b51f4a1bfe92463f8cd6701e4a5743947fe5ce0a345625798f9dc1fa9b12afc7faedc7f57baa83ad7c8b6a0fc28791950dd4c7c04a81836002667fdd702efca59e4a50c0e7f2a8cbe36761efc229ebc95ac8e428ca7ddc6c3a5b6fe8c77de0268e867a0d09ffcda2023d55c69d7e3c34305fdf00fa67e4ce3fcb7753868a398735469dba14693850faef4e61e5f023c8ffff4027bbc8a8a1aed2d8264f672caf7dfbca31c4bad5c20aa51f3ca3f137542c6815215d2affa9748c6d2924f58015c3638100ea613b192811bcb61ef1a67b918ae330b1230940ae506a47a09ba298573bfb5f1285490bf9752a3417f50af252b36836d0295f0e538b6e5b4a55154dc4e29931d600239090e60c771f17927b3be1e183c97ac56597d48eb190e10ce0c2ea7154c296d8e76833baad37936a530504ea01ca7dfe8c7f328ae2e87ff03ec7554421932191b5bd8e380951a9f2079727c01d86458de0bc91b7ffa4249c175dac62535f26dcdcef619b3fa8070287943d2a0da0b296f1f5834a2b5776406bc5c53f8e60b36d2ca0bd2e88b5d971acc1c6f421520c8de83b268ba0b011da10120229d59bacb4391c70a442184609f21c2c970cf92ae191a05b0eb65052cc42a45952b354fde09613d9e7bcedcb8ae6c12da68469e8ae23cafc40896b041c69addf947545130", 0xda8}, {&(0x7f0000001500)="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", 0xb01}], 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8, [0xffffff80, 0x8001], 0x6}, 0x10) 02:52:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1071fe, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x1015) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) [ 236.401059] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 236.451043] overlayfs: workdir and upperdir must be separate subtrees 02:52:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis)\x00'}, 0x58) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x6) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) 02:52:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000480)={0x1, 0x2, @status={[0x1, 0xc33e, 0x1ff, 0xc7, 0x7, 0x4]}, [0x8000, 0x17fc1aad, 0x7ff, 0xffffffffffffff7f, 0x8, 0x3f, 0x1, 0x7, 0x401, 0x1ff, 0x80000001, 0x8, 0x80, 0x3, 0x3ff, 0x1f, 0x7f, 0x0, 0x5, 0xffff, 0x0, 0x4, 0xcf3, 0xc1a, 0x577a, 0x2, 0x5, 0xfffffffffffffffb, 0x9, 0x101, 0x100000000, 0x8, 0x9, 0x8, 0x3cea, 0x9, 0x1, 0x3, 0x7, 0x1, 0x8, 0x90e, 0x8, 0x1f, 0x4, 0x7e, 0x3, 0x86, 0x9, 0x5, 0x8, 0x0, 0x8, 0x3d, 0x3ce0021e, 0x6, 0xffffffffffffff00, 0x6, 0x6, 0x0, 0x1, 0x3, 0xffffffff, 0x8]}) fcntl$dupfd(r4, 0x0, r3) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) fadvise64(r5, 0x8001, 0x31, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) sendfile(r6, r7, 0x0, 0xb3) 02:52:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 236.665741] overlayfs: workdir and upperdir must be separate subtrees 02:52:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r4, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2d}, @map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x6e, &(0x7f0000000140)=""/110, 0x40f00, 0x4, [], r4, 0x3, r1, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0xfffffff7, 0x1}, 0x10, 0xffffffffffffffff, r1}, 0x78) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000080)={0x0, 0x7, 0xf016}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0xd811) [ 236.976798] overlayfs: workdir and upperdir must be separate subtrees 02:52:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x7, 0xd, 0xfffe, 0xfff9, 0x81, 0x9, 0x4a9cae23, {0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0xaea7, 0x1, 0x7, 0xc2, 0x7f}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r1, 0x80, 0x10}, 0xc) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(r4, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e23, 0x80000001, @ipv4={[], [], @broadcast}, 0x4}}}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d800000018008104e00f80ecdb4cb9140a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a800160040003cc002fe801203ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 02:52:29 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis)\x00'}, 0x58) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x6) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) 02:52:29 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5422, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020005491d, 0x800007f, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6c73, 0x4000) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00 \x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf2503000000060001004e210000050002000a00000004000500"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x24}}, 0x0) statx(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x800, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="d7c4e3000077aa0000000000", @ANYRES32], 0x48}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20c86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a3", 0x6f, 0x1}], 0x100488, 0x0) [ 237.168406] overlayfs: failed to resolve './fil': -2 [ 237.205038] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:52:29 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) 02:52:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000070a0001006e6574656d000000060002"], 0x68}}, 0x0) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x2400, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xf4, 0x34, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@nested={0xa8, 0x85, 0x0, 0x1, [@typed={0xc, 0x3c, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r6}, @typed={0x4, 0x64}, @generic="feb02dce25eba28e8d103190622ee11234dab0006bffcb7d70312797811ba7638f4b8aea10cb783722561f0fcde944cadd2703f1d138bd72e497afabe1c0249177839bd5dfe64090cfacff683b7ad32b72362efa8b88ad97f6830f254e8070bdf30fd8e37476f6fe67de69f4702d1c86b7a0a5acd6ad58555c6e33e9471a5f47ea675ec312c83c6be8c3d611"]}, @generic="180f84cdf3cdefd94176355deafd18d3af4296f5ca344141b44ab6e8494616cc7d0b", @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@mcast1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x801}, 0x0) [ 237.419929] syz-executor.0 (11342) used greatest stack depth: 22880 bytes left 02:52:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff}}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_tables_targets\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "c1b2a9bb19aa09d500b0765e30941ec1"}, 0x11, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000180)) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000140)) [ 237.509937] overlayfs: failed to resolve './fil': -2 02:52:29 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 237.575970] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.645347] netem: invalid attributes len -22 [ 237.681503] netem: change failed 02:52:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) [ 237.783962] overlayfs: failed to resolve './fil': -2 02:52:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=@newchain={0x20ec, 0x64, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xa, 0x9}, {0x6, 0xffff}, {0x10, 0xfff4}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3c8, 0x2, [@TCA_FW_ACT={0x2b8, 0x4, [@m_mpls={0x140, 0x1b, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x6, 0x0, 0xc5d, 0x4}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_LABEL={0x8, 0x5, 0x50c2b}]}, {0xdf, 0x6, "29c3e9570e729d23c320a247fac0afa8ad19e4e1d95759b49e74be569450711b97def332897b80f41dc270ce341b26ae92af30e2aac61759c2cefda2aad973add2dcd3b5dd58d157b6cc06968b5568c7a8760e8fb72006ad68aa58c42f85ea7fe9d88a447bdfb1c09b6b5808a9ed8ac0c0fea749507062249d22d3b6924824a1c7bf1960ef2b1b1b667bec4e48d8aefe36e39991ba9ae403fe0905ab9dc618e46cc4a4a1959ebbdbafa5f32e8c4550f9f51ec352f5fce4e2c4450225fe4835b9f07b1a9309c49eedeace1001cd49329a0c808f67ee889759445f2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_ife={0xc4, 0x19, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xc60}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x27d9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80, 0x6b95, 0x0, 0x5, 0x7fffffff}}}]}, {0x41, 0x6, "32f6503aa841c8c60b0cf473ee4d99c2fc42a5ceeb9301fc8408de476329ac3b2cdb5733112b289d05748bb1d1403e4ef9639d081817986da407632098"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xb0, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0xff, 0x20000000, 0xd8794e, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x7, 0x6, 0x34f6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x10000000, 0x40, 0x4}}]}, {0x23, 0x6, "79a575be9d6d88becfe38cba74d7b7f89a557d2b27174e8e93cbb0622a60bb"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'wg1\x00'}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FW_POLICE={0xc4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x1, 0x8, 0x2, 0x6, {0x4, 0x2, 0x0, 0xcd, 0xfffe, 0x1}, {0x4, 0x1, 0x0, 0x1f, 0x1, 0xb7d}, 0x7fffffff, 0x5, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x2, 0x8, 0x4, 0xaf, {0xda, 0x0, 0x400, 0x0, 0x81, 0x2}, {0x40, 0x0, 0x3f, 0xfff, 0x15}, 0x19, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffbe, 0xd, 0x4, 0x4, 0x6ca, {0x0, 0x2, 0x80, 0x1, 0x6, 0x1000}, {0x5, 0x2, 0xaacb, 0x9, 0x1, 0x6}, 0x1f, 0x6, 0x7f}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1cd0, 0x2, [@TCA_CGROUP_EMATCHES={0x444, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x100, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_DATA={0x4f, 0x5, "ab80de8f1375afa1c0ea5dd2b445bc278ab0ce479f281a2a7b914765b8e7269ae9449864ddfd04e4a3d88585708432f16e717ad858fa9d56b19699b88d7b792c490358be1638746d969fb3"}]}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x40}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="71f4a33444", @TCF_META_TYPE_VAR="0c96c268"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff8, 0x0, 0x1}, {0x1, 0x3f, 0xc5cbae0e8b0c8189}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xff}, {0x1, 0xda, 0x2}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="cfdec9", @TCF_META_TYPE_VAR="8776"]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7fff, 0x8, 0xff81}, {0xffffffffffffffff, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1cd7, 0x7, 0x8}, {{0x0, 0x1, 0x1}, {0x4}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x24, 0x7, 0x8}, {{0x8, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x7f}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x7}, {0x2, 0x6, 0x6, 0x1, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8001, 0x7, 0x8}, {{0x197e0000, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb74}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0x3b27, 0x100, 0x7923, 0x4, 0x8, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8000}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x15}, {{0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x800}, {0x6, 0x9, 0x1ff, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5000, 0x3, 0x2}, {0x10000, 0xffff, 0x7, 0x1000}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6}, {0x1, 0x8, 0xa8, 0x3f}}}, @TCF_EM_CONTAINER={0x24, 0x2, 0x0, 0x0, {{0x4, 0x0, 0xffff}, "996b78d687e8f7acf0b158329dee3a12854521c08edd"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x20df}}, @TCA_EMATCH_TREE_LIST={0x16c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x81}, {0x800, 0x401, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x6c, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x7}, "f618e2e967eaabff8ab352f38675b8e53172b63760c10db7d02eedd04ce2df96c65d5fc58a3d3b1634f09897cfa9150161389a4d9b3f8844ee093dfc1e52b33a2539dfd75b5a79e0387356cc9b8056bbf7e4635386540b9f7d9828d1350b87"}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0xe462, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="0600f04b", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8e08", @TCF_META_TYPE_VAR="c4112436ab6dbd04ea5d"]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x1f, 0x9, 0xfff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xf001, 0x0, 0x1}, {0x2, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="46f6759acbcc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="6bf30c8291c2", @TCF_META_TYPE_VAR="54e717b5a6bc2808fc8d", @TCF_META_TYPE_VAR="6f749cbef121e3"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="2638b5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xa0, 0x1}, {0x3f, 0xa6, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="45c66f75e90669bdf6f6", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xff, 0x2}, {0x5a7, 0x40, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x80, 0x7, 0x1}, {{0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xff81, 0x8, 0x3}, {0x0, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x40, 0x7, 0x16}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x1000}, {{0x4, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xa7cc, 0x2, 0x2}, {0x8001, 0xa, 0x0, "d7b9a538072e325ee6c6"}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x1ff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x2, 0x7, 0x3, "d45d1d6e7ac0ec"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfff8, 0x3, 0x8001}, {0x6, 0x54a, 0x9c6a, 0x6}}}]}]}, @TCA_CGROUP_POLICE={0x50, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x0, 0x80000001, 0x0, 0x2, {0x1, 0x2, 0x8, 0x1000, 0x6}, {0x0, 0x1, 0x3, 0x6, 0xc670}, 0x3ff, 0x8, 0xf3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_CGROUP_EMATCHES={0xd8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x20}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x4, 0x9, 0xfff7}, [@TCA_EM_IPT_MATCH_DATA={0x40, 0x5, "eeb3b1dc7b1fbbb04ea6e473c35b6c644fdb7893d0e549c6ec0fa80b2057c3398cdb35e564a504f946d90e1f896296bc47fbeb3a1a51ec48c6eb9653"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0x6, 0x9, 0xfffc}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="cad01449"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="daef8a65", @TCF_META_TYPE_VAR="fce6e1b97a7226f9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x81, 0x1}, {0x1000, 0x3f, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_EMATCHES={0xe0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ad5223fcd23703c4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="76fef8339b9cdc9c9d77"]}]}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x40}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="96aeb175bafc18d4b1a7", @TCF_META_TYPE_VAR="bff9dd07a6ef13e7a99b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1df2542379368f1b"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="22596c3c2b973996", @TCF_META_TYPE_VAR="4fc536deb4997902"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7de8}, {0x0, 0x8, 0x9, 0x4, 0x2, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_EMATCHES={0x78, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x503, 0x7, 0x9}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x2, 0x8}, {0x0, 0x9, 0x0, "eeeb60e86109aace68"}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xfc02, 0x2, 0xe863}, {0x1f, 0xa, 0x2, "cf4c18ef9892ebdc6ce9"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x42}}]}, @TCA_CGROUP_EMATCHES={0x1608, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x20, 0x2, 0x1}, {0x59, 0x2, 0x0, '9Y'}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0xfff7}, {0x3, 0x4, 0x3}}}, @TCF_EM_IPT={0xb0, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x9c}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x8}, @TCA_EM_IPT_MATCH_DATA={0x89, 0x5, "11da62ed866de946d42db43694bc93fa8ba580726d9d064e2b9026436571e519d117f796137f64cb81de8fc18df9749d554dcfcb82d0d2f541b18b13e764c98d73b522d840b8a8be06b7c32f8885bedbefa507b42a24cfbbb562fcf3e884087c227d59a5e815d0e5ab8a63c17bcf78660a556b8bb87d211d5b0a4cc44d8eb3aacf582cae34"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7a02, 0x7, 0x401}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb8, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x7}, "8c0fcc45f5d49298704e48acf2800598753f094867c717fc210c0a3d460110f5b2c88b5a79244add9b0c7f3fdeb6df9515b5047aa5128b34e9090e71fcad1ae1e6f2733615917f55da1ea1ce8e7f4efc9f8b64f482352929b2fbddbe4f8c1c89fd020131acc0597e9070b1b47659a05f2e7156a13ca71355eaa8eb73f3dd0adf634fb77edac2c5dc531c4b66cc57cd324b4ac6163720b82ff0eec5dc5b722814ecefd48e3bb50d8357"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x7f}, {0x879, 0x9, 0x1, 0x0, 0x6, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x8}, {0x1, 0x2, 0x0, ':w'}}}, @TCF_EM_CONTAINER={0xb0, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x9}, "3c088cad78a67f06f5075cc3cf0f19eceee77e6cd69162f21afd290f4a9ec0125b68b655e488551a6e87c1a3cc4dad63d2768bb1339b9ad0656ee6b572a6706f2c3e73bf8b412474e93f443ee249e76e6db33468ad4ed6ea62cf29ef0a0f6bec4705da748f124d03ac3f1bda12cccb77a4cdcdcd57ba5b8d04440bd4a1f3e2b483ffb95187694c91e8bc1a2698b41c1cbb58e8accb1654b8534f11940155a59892"}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x40, 0x4, 0x9692}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xff, 0x1}, {0x1, 0x4}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8fa, 0x5c}, {0x400, 0x7f, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x2, 0x0, 0x0, {{0x800, 0x0, 0x93}, "7fb23090428172b66501d0"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xabd1}, {0xfffff91a, 0x4899, 0x3, 0x7, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x11bc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0x1}, {0x5, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1143badcf0da9d91d5", @TCF_META_TYPE_VAR="5059e5b10063e1", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f802ba4e"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f767261f75c3fb5fdc"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x3f, 0x1}, {0x80, 0x3, 0x2}}}]}}, @TCF_EM_IPT={0x103c, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x401}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x669}, {{0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xe0, 0x2, 0x0, 0x0, {{0x20, 0x0, 0x7}, "0b4947e363c86b11dd1a8a69381a2b1aca491e4eb9c22fa89308686168495c0e6dc2f3fdbf45f64e190dacc52bdbb57a1988d608c2baef5add37fbf23457f6474e6436a9985df0fc0f6c5ac6d2898db470af5d81c07743a64fce312f15c4f9251bfbb9b81f7e6155b5630107e005dbcb065e5b0623e4bea9ed81bc1494adbe7eea1f0a3bc5e1ebed14137d0f6d0707133b8754fb281d1a37892daf8d6850ecf709432c5d312f7bead73dd3c2088ab09212c52e2d3da77a385ee16349074434e0a3a1b5b7253ddb12dd1f75e8e87b9f9ef8b2"}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0xfe00, 0x0, 0xa601}, "ef2ac46f1ab82419a5ed61b1e18323d5445543bbe0"}}]}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x101}, {0x4, 0x6, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x8}, {0x10000, 0x1, 0x0, '}'}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffb, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x81}, {0x3, 0xffff, 0x1e154903, 0x6}}}, @TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR='!}', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x6, 0x1}, {0x2, 0xea}}}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='\r', @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2a2632c9705846", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="d17a2c1e795f", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="71d6bb1c03894c75e05d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x20, 0x2}, {0x5, 0x8, 0x2}}}]}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x7f2c, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x3d, 0x2, [@TCF_META_TYPE_VAR="7f4e00cf77cab45275e4", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bb53fee80fb016b1", @TCF_META_TYPE_VAR="0061cd982965a490864a", @TCF_META_TYPE_VAR="c6dbc06bef9289ea", @TCF_META_TYPE_VAR="57e9ad71372598b9f9", @TCF_META_TYPE_VAR="9a86433c28536d", @TCF_META_TYPE_VAR="a5"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x98, 0x1, 0xf37}, {0x6, 0xff, 0x2, 0x7, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x20ec}}, 0x0) 02:52:29 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pwritev2(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x7) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='}yz0'], 0x200001c4) 02:52:29 executing program 1: timerfd_create(0x9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x10d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r2, r1) r4 = accept4(r2, 0x0, &(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000880)={0x0, &(0x7f0000000780)="6b6c0ade71273b14e7e41c8fa2309d70c25da1ab4c5861e379faf18c3758a3615932469d349e2254844097872ed76e6c735b9f828156139aaf58d12fbc0558ae64b542d1740479ec99d96b222311c73efdf2e838c09b4bc4924aa78eed43aa1369e25ffdd7b5ed6980e05de4b8acf0c9806da53f2990b1d6b23f5c44ead7125bae555cd6587ec3984090400289afd40623b46b3d9b920685e46f98e8e7e77fea88af22957367a5a344ca3a09437a5620726ab9cabd665fab5e20dd9af6eb60e17f", 0xc1}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) r6 = dup(r2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@sack_info={0x0, 0x7f}, &(0x7f0000000a40)=0xc) sendmsg$xdp(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x2c, 0x2, r8, 0x1d}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)="b835725732d375a51e31", 0xa}, {&(0x7f0000000540)="24ca74ccd66ed8f6ffbe97f7e986fef762926dd5285c2d832a5402834c0621e79b5074df732a77085af1ce853f2f03016230b4f4f325ffe77b2f045d2d5a5c7aa1b8b4384a98888f8f614817e658d33ae5e3f60239e76f723f234d2753c3e039d474055c4287e3063adafc746ff66ae5", 0x70}, {&(0x7f00000005c0)="e6f20e648289d7ed6d285a2ed86ee567e1dff915a9c2007e9a4472a0e91c15cb3019b3d2311b2ee9766c7d30d18cfb84eadcc0bea6d2b1ca87722f6156c12f85d726bac61e6c054acde83de013f54be407876d06fbed52528c4add438043bd6fe329ae7b3d40875f9b4369a95af1390e6dfcf44eb6590366daa43be1e6980f24c4cf915d0ac8d039620b52258728f6f13ee961afb8f923ad950e8e51846889a26eb24f2855c8e2e40ad6844ff8e2cb5fd733a9478b3d655256799bda4b4a24152cc645117c0fb79d7b6ae38ee8", 0xcd}], 0x3, 0x0, 0x0, 0x2040000}, 0x400c000) recvmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/118, 0x76}], 0x1, &(0x7f0000000200)=""/207, 0xcf}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x283) r9 = syz_open_dev$vcsn(&(0x7f00000008c0)='/dev/vcs#\x00', 0x10000, 0x400040) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}, 0x400}}}, 0x84) 02:52:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) sendfile(r3, r4, 0x0, 0xd811) 02:52:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 238.011917] overlayfs: failed to resolve './file': -2 02:52:30 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) r4 = fcntl$dupfd(r2, 0x0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 238.233919] overlayfs: failed to resolve './file': -2 02:52:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) socket$inet(0xa, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) 02:52:30 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 238.488322] overlayfs: failed to resolve './file': -2 02:52:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd4(r0, &(0x7f0000000040)={[0xff]}, 0x8, 0x80000) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000180)={0x7fff, 0x4204, 0x0, 0x1, 0x0, 0x9}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x35, 0x8, 0x12, 0xfc, 0x0, 0x4, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x5, 0x9}, 0x200, 0x7, 0x7fffffff, 0x9, 0x1, 0x2, 0x6}, r3, 0xa, r2, 0x1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000080)=0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x7) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd811) 02:52:30 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:30 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) 02:52:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1f, 0x5, 0x2, 0x8}, {0x8000, 0x20, 0x3}, {0x8, 0x2, 0x9, 0x1000}, {0x2, 0x1, 0x7, 0x2}, {0x6, 0x10, 0x80, 0x20}, {0x5, 0x6, 0xff, 0x7ff}, {0x1, 0x4, 0x8, 0x1000}, {0xc4, 0x80, 0x7, 0xad0}]}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x20001, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)=0x101) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0xd811) 02:52:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) 02:52:31 executing program 0: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) unshare(0x40000000) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x31) 02:52:31 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 239.223635] IPVS: ftp: loaded support on port[0] = 21 02:52:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) read(r1, &(0x7f0000000380)=""/233, 0xffbe) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x2, 0x2}, {0xfd08, 0x800}]}, 0x14, 0x0) r2 = dup(r0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x7, {{0x2, 0x4e22, @broadcast}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x7}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x8b}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="105820850dfe7e1f9d492211e0fbd1ba14c075b7402eaa913d14a2d5fb1a54a046ea1a758375a3211c18b7ca0933ebfd719e1c244844d4bdeb9014a8c3cb8114343488c166d0927a5c8b7cab108a5026cf81cbd18f36ae8d14fe62d092df9a6b10a7dae3634ff805a4caf50e1bee8ac63d", @ANYRES16=r6, @ANYBLOB="10002dbd7000ffdbdf250c0000001c0103800400010004000100af000400b2d27db1e0434ce491f241b14ea4c4fa55fbdd00cd6f6348bf41ee2c8a3001dd960afc47672cc18144e25ffef6ba7f45c7a9aaa65fa567becc23ccc7bc0504f3a4b61911c1485b8772a2897740fd591dfe4d8f5e145cf391a54b30bca2eccc14fb1430b38c5131539f057d1122f4dc0a11e4b081516713e8bf0b282dd0320dc36173e780b9e44c2292aef0e4b601fdc22919b3449a64c2ac0e85d115beefe721b9850f57889f3fa26e4c1600580003803400018004000300040003001800020073656375726974792e6361706162696c69747900060002007b000000060002007b000000100001800400030007000200235b0000100001800500020000000000040003000800020000080000"], 0x130}, 0x1, 0x0, 0x0, 0x2404c084}, 0x40) r7 = fcntl$dupfd(r4, 0x0, r3) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd811) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000780)={{0xee, 0x1f}, {0x1, 0x7e}, 0x10000, 0x1, 0x6}) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r9, &(0x7f0000000380)=""/233, 0xffbe) execveat(r9, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='security.capability\x00', &(0x7f0000000280)='mountinfo\x00', &(0x7f0000000300)='mountinfo\x00'], &(0x7f0000000700)=[&(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000500)='mountinfo\x00', &(0x7f0000000540)='security.capability\x00', &(0x7f0000000580)='/proc/vmallocinfo\x00', &(0x7f00000005c0)='{\x00', &(0x7f0000000600)='#[\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)='/proc/vmallocinfo\x00', &(0x7f00000006c0)='mountinfo\x00'], 0x800) 02:52:31 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="64690c9d3b2fd864b8d88f300300000030306be86f6554e8a17066b59956578cc82eba99a04fde0b52be6a5a623e33f0666e7bf9a2b0639b92a8394b2be2d8a856faa743b9850e44061a4f55a811e22eb74a15c4596d0dfa3aef36bae3e4aaf3d4a8a87e9558cbe5bd99e8145001310828c66f"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x1}, 0x8) [ 239.544757] hfs: unable to parse mount options [ 239.591649] IPVS: ftp: loaded support on port[0] = 21 [ 239.622362] hfs: unable to parse mount options 02:52:31 executing program 5: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19"]) openat$char_raw_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3f, 0x6, &(0x7f0000000540)=[{&(0x7f00000000c0), 0x0, 0x1}, {&(0x7f0000000140)="4e1292cbe8a33fc0764b3daed19fe82d7eb6031eb680cddeeb4f370026c7ac30e22e242978f30005eb78e1dc1dff79488d58be6402def7a4852254cdcd1e4ff0b57b24ccb0eaeba49ca0ce730c2d40ecf8de45a3f5084e6dabfc485de0b65d141df6d2", 0x63, 0x401}, {&(0x7f0000000280)="e849f37daeef448004c8414fea6f99b6563864942ccd46001220cb9b1f8bac0664717214425321746fb39b1f9f5f7dc99515fd7654513919353f4216a1bab9d8a09e071fb7bf1260ecda9db7c1e1cb2d418bb0e77f6bcf46d63cfb30bfc6c3ca406958d756fa6306e6e11a6a8f591f3d68a0f319d9e169275c56a022533056b9796420845bec3d19fbf9157c0a276f340f13d15a058e7134e6a8f4c420b320295f5f748b5b20d79372ff044fb9217572ec184fd69a03bcb8e52505b6fada92e65166b06ecb5996ccdaecba73b5b144f08a201ab95eb40f31a7aef92ee3613e4fc5a93145891c093d0da40fc1bf4a7d111b1ed240a7d8e676f873e04a939f", 0xfe, 0x8}, {&(0x7f0000000380)="b8d89aa6550c15938db3e9e12da219be144c4bd8e43ad310ac8b1c7b3c779c5f45b71ba61d9647ae1467425b700fae4302b7dab995a22aae486e9261c705de3ff794612e60ab6f63c1d6fdf8f9ac4d71d5c7fbcf522e8658314780c797e33cafad2569e7251b07837d311e2c7e9c493ec5755da99645b5fc37926a694b799b6fd489ade0e164e4286d80ac618b464f3ca601027369070fb7f95e2a17f3bdc42eae37f0ca3e73da81b99b357a61907db4228f90ded78a8efe93b9983979682c6c8fef446a063921fd7809cb6d499a683d4b8d028df3ffab61a77e5dd2125f89a881750259f538", 0xe6, 0x2}, {&(0x7f00000001c0)="0c80571be8f2e04c65850dfdf94eb1034c51f7abf79cf6c652cb9acaa0f4ed7e59e1a00ae1508da75af88d756ad0e85b7530717c784f2acf89bff66579583bca2c2c188311680692c133e87d88746f9c5c078d88a6ace207034d27f6a64f48bedb22d411812a97fe054ed6", 0x6b, 0x1}, {&(0x7f0000000480)="55ccc310a119f5f1e89eb82b2b0f0af6ad388ab2c13b922f83968f9f92df9c5f39e51044b5e4157900277f66c2cdeca9eebeec23f8059fe146204a68aafe0f4f06eddd1020c8f182279fb5c8db3d2ffef50e2cc66f32a14484db9ed339e67718287672f84219e71dd122382c93420dd6b64c9a0b288d52543183308ecef6547a6588fca37009d2d1db8d71a36c65181ab65bab4eb958f20c86581186f768a02faf5af1e49b1ea68270e66700d9e754b363dcc2fc7d", 0xb5, 0x1}], 0xa890, &(0x7f0000000600)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@lazytime='lazytime'}, {@errors_continue='errors=continue'}, {@nojournal_checksum='nojournal_checksum'}, {@auto_da_alloc='auto_da_alloc'}, {@nomblk_io_submit='nomblk_io_submit'}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_hash='dont_hash'}, {@obj_user={'obj_user', 0x3d, ':&)'}}, {@context={'context', 0x3d, 'user_u'}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) dup2(r0, r1) 02:52:31 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x88201) sendfile(r4, r5, 0x0, 0xd811) [ 239.785968] XFS (loop5): unknown mount option []. 02:52:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) 02:52:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$TIOCSCTTY(r1, 0x540e, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) read(r3, &(0x7f0000000140)=""/244, 0xf4) r4 = fcntl$dupfd(r0, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x28) sendfile(r4, r5, 0x0, 0x1000000d811) r6 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7fffffff, 0x20040) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000080)={0x73, "d699a964ced0e90e9918fcb05ff6eab30d9242a953c4e3d7d2bc454a0ce0e7b7c31b652e5dbf70d36178cc62af747c38327d3e6ab1ee02f1a32633b387cf23bfbbd16de835879304a304889eaba91356010220e4a7633753ca433be21d0db1ff38b792e3f414e0f929e2cec20dfe4ff03ac4dfc81744307ce25811b9dd18ed6d"}) [ 239.916045] kauditd_printk_skb: 31 callbacks suppressed [ 239.916058] audit: type=1804 audit(1603162351.942:169): pid=11513 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/89/bus/file0" dev="overlay" ino=16185 res=1 [ 239.978536] XFS (loop5): unknown mount option []. 02:52:32 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 240.122442] Unknown ioctl 22026 [ 240.180829] kvm: pic: single mode not supported [ 240.180906] kvm: pic: single mode not supported [ 240.212664] audit: type=1804 audit(1603162352.232:170): pid=11556 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/90/bus/file0" dev="overlay" ino=16183 res=1 [ 240.283460] kvm: pic: single mode not supported [ 240.283522] kvm: pic: single mode not supported [ 240.309949] kvm: pic: single mode not supported [ 240.337373] kvm: pic: single mode not supported [ 240.352725] kvm: pic: single mode not supported [ 240.370228] kvm: pic: single mode not supported [ 240.388410] kvm: pic: single mode not supported [ 240.406565] kvm: pic: single mode not supported [ 240.488308] Unknown ioctl 22026 02:52:34 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x4440) mq_open(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0xe, &(0x7f0000000140)={0x1, 0x850, 0x10001, 0x307}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 02:52:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) sendfile(r4, r5, 0x0, 0xd811) r7 = accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000100)=0x60) readahead(r7, 0x80, 0xffffffffffffffad) 02:52:34 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:34 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x28500, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) close(r1) [ 242.278157] Unknown ioctl 22026 02:52:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x74e2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x10001, 0x0, 0xff, 0x3, 0x4, 0x7}, 0x20) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 02:52:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x9a500, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={r2, 0xffffffff, 0x1ff, 0xef94, 0x6, 0x6, 0x6, 0x5, 0x2, 0x7, 0x6}) [ 242.344039] audit: type=1804 audit(1603162354.372:171): pid=11611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/91/bus/file0" dev="sda1" ino=16233 res=1 02:52:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000100)=0x10001) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000180)={0x7, 0x28, [0x9, 0x111, 0xff, 0x2], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x478}, 0x1, 0x0, 0x0, 0x801}, 0x4004080) sendfile(r4, r5, 0x0, 0xd811) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xa) 02:52:34 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:34 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mode={'mode'}}, {@huge_within_size='huge=within_size'}, {@gid={'gid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x5, 0x1, {0xffffffffffffffff}, {0xee01}, 0x8001, 0x7}) syz_mount_image$affs(&(0x7f0000000080)='affs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="1084abf4fd6dd3f6e54b8b5dde59208f03800ff8b8d011203793e0da45df639998cce59b014d498e76dd381ee8011aacf82e33e45c6b6c8839543cc5735626a2cf6696d07eb75b539a86d71ce0da3bc9c3be157c8c7ba8034cd024e17a88", 0x5e, 0x8}, {&(0x7f0000000180)="abcb343dc7e6e6cb20dace039f843bd58aaabe4fe92c3e84e95b0ee6907fe78de753b2758b5d9ee31373ff05a21f1eecd32d77d362ce95e590539627c000a62fd488f0a86ded7abd22c202b7ae7979e5bd7d8bc5f1e074eb98d339fa8bc4cb4638e4d9f354b35bd6aa48c385cfcf321b43d9a58b927503b570459948a276d3fb4ef6cf9b125c2e40e53355505e10a6c195717a56313752f6042f125b0928b868dadae845356a0e1f3ddc3cd3867aa95bdbd7c866136711147efecd66b1d964552604fb6852f328c5ad3d26ac60085184c5235a12abf77d140b1a2930c62200d435ade2bd963e39de", 0xe8, 0x6}], 0x1e0020, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=0xee00, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYBLOB=',\x00']) [ 242.468054] audit: type=1804 audit(1603162354.372:172): pid=11611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/91/bus/file0" dev="sda1" ino=16233 res=1 02:52:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xeba7}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) r7 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x7, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xb50caf48659c38c}, 0x840) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000080)=[{&(0x7f0000000000)=0x2, 0x2}, {&(0x7f0000000040)}], 0xd, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 02:52:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x70800, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'ipvlan1\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff50, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e002a000000e8bd6e00b80314000e000100240248ff050005001200", 0x44}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) [ 242.595429] Unknown ioctl 22026 [ 242.638829] tmpfs: Bad value 'bind=static' for mount option 'mpol' [ 242.669089] audit: type=1804 audit(1603162354.692:173): pid=11632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/92/bus/file0" dev="overlay" ino=16226 res=1 02:52:34 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:34 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000140)) read(r4, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f00000000c0)=0x6) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) read(r5, &(0x7f0000000480)=""/217, 0xd9) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000080)=0x3f) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x4b, 0x0, "cb7820607ce02c19ff38e1ce0c99ca4d012abd564da0715e5be62dd6ec59cd1f22f867593e2e1a760732ab2fc5ae5f75d497f8d898d8e930ddf3b6b8e97964390541b48618da0016a8386739de38b70b"}, 0xd8) r7 = fcntl$dupfd(r2, 0x0, r1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd811) [ 242.720818] device veth0_to_hsr entered promiscuous mode [ 242.734423] tmpfs: Bad value 'bind=static' for mount option 'mpol' 02:52:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:34 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x6, 0x400000, 0x8001, 0x8, 0x401, 0x6b}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/icmp\x00') setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0x1, 0x4) read(r0, &(0x7f0000000380)=""/233, 0xffbe) mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000002, 0x111010, r0, 0xaacd6000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x1}) 02:52:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/227, 0xe3) sendmsg$sock(r6, &(0x7f0000001340)={&(0x7f0000000100)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000180)="391ee2a16c0291b3c281893042f12e069e5069a4e8027a9227ad2bc52a4d74634e1265ebd19af04b358ad9358a7b33226ee9b596f5502b723410ea2e9a8f5b1a88", 0x41}], 0x2, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x6c}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}], 0xa8}, 0x8080) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0xd811) 02:52:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x32, 0x35, 0x68, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 02:52:34 executing program 1: socket$nl_route(0x10, 0x3, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) exit(0x0) [ 242.906572] Unknown ioctl 22026 [ 242.974875] audit: type=1804 audit(1603162355.002:174): pid=11657 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/93/bus/file0" dev="overlay" ino=16223 res=1 02:52:35 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:35 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)=0x2f) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x0, 0x80, 0xff, 0x1f, 0xfff8}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1ff, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x10000, 0x0, 0x4, 0x4000, 0x5, {0x77359400}, {0x3, 0x4, 0xfb, 0x9, 0xff, 0x7, "4715a6c0"}, 0x7, 0x1, @offset=0x8, 0x81, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:35 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)) [ 243.207936] Unknown ioctl 22026 02:52:35 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:35 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 02:52:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x100000000, 0x8, 0x7}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0xa20000, 0x3ff, 0xfffffffb, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990904, 0x9, [], @ptr=0x231}}) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x608801, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000200)={{0x1, 0x0, @reserved="96e95af6192cb035e076440911d56991787b319635101485ea0370fef225b785"}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x10001) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x9, 0x8) 02:52:35 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) r1 = socket(0x1f, 0x0, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x3, 0x164, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) getgid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0082ce", @ANYRES16=0x0, @ANYBLOB="08009fbc6f449f8acf25011b3883e8f610a31f000000"], 0x1c}}, 0x8004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0xfc, 0x0, 0xff}]}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffff70, 0x200007fd, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x20c49a) socket$nl_route(0x10, 0x3, 0x0) [ 243.407790] audit: type=1804 audit(1603162355.432:175): pid=11696 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/88/bus/file0" dev="overlay" ino=15755 res=1 02:52:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:35 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffc}, {0x80000006}]}, 0x10) r1 = signalfd(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000540)=""/183) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x760, 0xc, "673c13c74b85a4e5"}) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x11c) sendto$inet6(r6, &(0x7f0000000200)='\n', 0x1, 0x40080, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0xf7, 0x4, 0xfffffffd, 0x5c, @remote, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x10, 0x9, 0x4}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r10, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="0017de855c4742f37525030000130800b2622bc9acf4c22927c6101e840afc0f0a9d56bdff09e2db3dbad2ac8c6214c69972fc0243adfdff038c52c3c0d7935f82c22a82ffb5dd778de7f501e4d59f9b23d7b0cb05c990656139eaf27756b171f4547d4ff83b4e23dbe3a152fdbfc81a0253d30283e4d153f5452b5fbe727d4874d3aa78262c98873656ed0efc7931bef2039ae4af66f0b8a4ba7e01b0be0c94b76bc1c0ca39c5b61a881317b9a2330e7765a8fab72180cdfb617dd5764767861d706b5f1933469145f3352907435124619aaa2ee2990c9db7d20d04b690a100"/240, @ANYRES32=r7, @ANYBLOB="2801028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400cb07000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040007000000"], 0x188}, 0x1, 0x0, 0x0, 0x20048010}, 0x40000) 02:52:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80, 0xc4) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) sendfile(r5, r3, 0x0, 0x1) 02:52:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) 02:52:35 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000010500)="ff030400fc030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x2000}, {&(0x7f0000011d00)="ffff01", 0x3, 0x12000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000580)=ANY=[]) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x442}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x3c0b, 0x20) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="f9c06c7afcba91cfd4794ae85656ce76d088965771952e3d1b11b18e4a9b6c1e6c4c0729f58fcacafed4c77739eff2a8fa45f24b309356abcd205ca9be1f5bf20738ea2f401ba05ae5f1361e6a555a73f0249f10f2f4cdb0e6333403b89ea9f4a29268eb40", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000001c0)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x8200, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000400), &(0x7f00000004c0)=0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) [ 243.606924] Unknown ioctl 22026 02:52:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @private=0xa010101}}}, 0x90) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x0, 0x8001, 0x80000001, {{0x5, 0x4, 0x2, 0x20, 0x14, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast2, @private=0xa010100}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000002600)={'sit0\x00', &(0x7f0000002580)={'syztnl2\x00', 0x0, 0x4, 0x49, 0x7f, 0x1, 0x50, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x7, 0x40, 0x7f, 0xffffffff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r11, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002740)={&(0x7f0000002640)={0xcc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000c11) sendfile(r4, r5, 0x0, 0xd811) [ 243.714322] syz-executor.0 (11724) used greatest stack depth: 21968 bytes left 02:52:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x62, 0x2, 0xffff}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) [ 243.759886] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 02:52:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:35 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x8000001, 0x10000, 0x1, 0xffffffff}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000003000000000100000004000000000000000000"], &(0x7f0000000500)=""/131, 0x32, 0x83, 0x1}, 0x20) 02:52:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 244.001621] Unknown ioctl 22026 02:52:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x220080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x4a0800, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x13}, 0x3}, {0xa, 0x4e23, 0x4a, @private1, 0x6}, r2, 0x9}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xb2bc, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYRES16=r2], 0xb0}}, 0x0) 02:52:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0xffffffffffff8000, 0x6b2e41) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3, 0x2000000, 0x4, 0x46, 0x2, 0x7, 0x477}, 0x1c) socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x9, 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r2, 0x0) 02:52:36 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, [], 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x240448d4) sendfile(r4, r5, 0x0, 0xd811) 02:52:36 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x282580, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000080)) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x9}, 0xf) r1 = socket$inet6(0xa, 0x3, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x4000881, &(0x7f00006f7000)={0x2, 0x4e24, @empty}, 0xfffffffffffffd95) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="020000e4c7d6b20aaf4091cbe0c7e3742a5900", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r3, 0x1}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x2, 0x12000}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 02:52:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x20, 0x7, 0x40, 0x7fff}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) [ 244.348591] Unknown ioctl 22026 02:52:36 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x80000, 0x0) connect$nfc_llcp(r4, &(0x7f0000000480)={0x27, 0x1, 0x1, 0x2, 0x3, 0x6, "13e0d76c804ff52e542b7fee86c5873dfac2c8b3ba610e7ca5cce3390028dc7eb5ddfeb40abf6b9c73b4b5743989656c792712eac1f380cdcc56992fd2a0c4", 0x15}, 0x60) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffff8, 0x0, 0x6}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x1) [ 244.414296] audit: type=1326 audit(1603162356.442:176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11790 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 02:52:36 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {0x0, 0x2}, @raw8={"a357b6b140cbb60000fd985d"}}], 0x17) r0 = getpid() bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x29}, 0x10) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0x4) pipe2(0x0, 0x80000) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:52:36 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x9, 0x1, 0xffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x20e00, 0x0) getsockopt(r3, 0xc0, 0x80000001, &(0x7f0000000180)=""/89, &(0x7f0000000200)=0x59) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) read(r1, &(0x7f0000000040)=""/247, 0xf7) r6 = fcntl$dupfd(r4, 0x0, r2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xd811) 02:52:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 244.591676] Unknown ioctl 22026 02:52:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x5000}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000400)=ANY=[@ANYBLOB="200000ea"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0xd37d1f052094c4eb, 0xd1, 0x7fff, 0x8, 0x17400f15}, {0x2, 0x80000000, 0x6, 0x3f, 0x7}, {0x80000000, 0x18e893a9, 0x9, 0x3ff, 0x9}]}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x7, 0x2, &(0x7f0000000000)=0x1}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:52:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r5 = fcntl$dupfd(r3, 0x0, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) 02:52:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:36 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 244.787036] IPVS: ftp: loaded support on port[0] = 21 [ 244.858638] Unknown ioctl 22026 02:52:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0xc950c4b70695bcbd, r4) r7 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000040)={r12}) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000040)={r12}) sendfile(r4, r5, 0x0, 0xd811) [ 245.118926] Unknown ioctl 22026 [ 245.199291] pic_ioport_write: 88 callbacks suppressed [ 245.199297] kvm: pic: single mode not supported [ 245.199361] kvm: pic: single mode not supported 02:52:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0xc0, &(0x7f0000000140)="fcf8e2acc719011e614dbbaad2b871febf79cbfc91548b5b2e6dc7ef8a3ce6488176efa449605b10b41e8e2980a289c81073d05e6fdf0b46527108685188d6aedfa6e12a280b3bad3df2ae6480196d2b27715f6a7be69268124c14fb61bd760779388d6f6d6484d3f23de3646d7215508cb248d7ea9981abd8f0d3b3e502a6f5ba460d0a66dc50698383ee93c1633e11ec2d6aa4e580c4d748dc3de99eb110646ed4ee0f0ea753118777364d9588fa1ec610a48bc3654232c2cf7bbe5d7a4e13", 0x77, 0x0, &(0x7f0000000080)="78c021b767259492671678cafab1a335b058ff7eb281da175a240e850129f02747ae4e2a347c7bb4567b7c5b669477f328d593d9e58277fe3624ccc7044a9089168a744e58450e2d7b794d8967ab4d50c515ba3293735b9849c5464b9b51d2f75e502a4e7e156368e6007e9f627e051d6ac22d0ad6d8c3"}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x5, 0x4010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) [ 245.238480] kvm: pic: single mode not supported 02:52:37 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000340)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x62}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @generic={0x2, 0x7, 0x0, 0x8, 0x7ff}, @ldst={0x1, 0x0, 0x0, 0x1, 0xa, 0x10, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x3, 0x2, 0xb, 0x8, 0x1, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff4b9, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0xfff, 0xe0, &(0x7f0000000100)=""/224, 0x41100, 0x8, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x9, 0x200}, 0x10, 0xffffffffffffffff, r1}, 0x78) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) [ 245.266725] kvm: pic: single mode not supported [ 245.288666] kvm: pic: single mode not supported [ 245.313284] kvm: pic: single mode not supported [ 245.343007] kvm: pic: single mode not supported [ 245.378687] kvm: pic: single mode not supported [ 245.410454] kvm: pic: single mode not supported 02:52:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {0x0, 0x2}, @raw8={"a357b6b140cbb60000fd985d"}}], 0x17) r0 = getpid() bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x29}, 0x10) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0x4) pipe2(0x0, 0x80000) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:52:37 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r7 = openat(r5, &(0x7f0000000080)='./file0\x00', 0x40, 0x104) getsockopt$inet6_dccp_int(r7, 0x21, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read(r6, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) sendfile(r4, r5, 0x0, 0xd811) 02:52:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'vlan1\x00', {'geneve0\x00'}, 0x6}) 02:52:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x100, 0x4, 0x1, 0x1, 0x2373, 0xec, 0x3f, 0xc0000, 0x8, 0x7, 0x0, 0x6, 0x8001, 0x8001, 0x8, 0x13, {0xfd75, 0x95}, 0x3}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0xffffffff, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x3, @dev}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) [ 245.462645] kvm: pic: single mode not supported [ 245.876951] ipt_CLUSTERIP: Please specify an interface name 02:52:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd7f3) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0x10000edbe) [ 245.925392] Unknown ioctl 22026 02:52:38 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="b993dcd506ed783d4a2d0529293f49f49746b91357f3f189158c2f79935f284afe7b086d7b86b0243ea406e091c0fd5af4d82c3dab1344b3c91f8fe4fb1831024a4782bc1f00eb858659fbc6d4e0e49d521c440c1e2badcd81ed1831caa6167974b9b8f54e7a50d76b3147bd5934d7cfc9a9a12b127e5328371ab6fa39663cc89ff950e201fcd9871fc9af0e6b503720a1b147cb20deb6c4f1d78c8911c660c962e8d00263679ce12edc8d3a7d8c7a3deb04f44ae4d4fb5c9bea50568d5282eea274496cf53ab52c749ca8fd9b80b0f422", 0xd1, 0x9}, {&(0x7f0000000240)="912b2f32378931d7a762039753683a119607ad3563d18c98211d922ffdd9696b82286cd6e4707c22d5e8db9231ee444bb970a527373838e38a5cb993b861ad2493bbb71a149ea8a7664e3428efc768dfbb47dc3e0fcc7f98bc83", 0x5a, 0x1}, {&(0x7f00000002c0)="2e87a222f0372c4e8bf545e81d224356e29045efa38478ff340aebb1ed9249c3a6057ff3a96676121407bde2cb05ee77d2a5f34e2c9fd47aa9e9f96d12fbe1b38182dd823d36db257d8faee4c718d89149e5c5f607a8e13e90bd898fa35143a5deab17344e6790468b572a284f910578c7ab20ac2c9aa3645951215bd4baa5e790f684f7ea30ff7d47195fb8f3993a6088702e17ee31c05211f167b3d2cbfccac39dbd83430b09efe680d8471c6b44", 0xaf, 0x1cfd}, {&(0x7f0000000380)="b7f99214f315088363e420e9f1e2b399944609f0533b5240af219ede7e217b192219a7fe7525e08a4709d4ad7909715defc6d80512ee262944b48902d96c6f3c97ccc59b42f44047967a476995d18a811c055f1bafba5ffb92de8e84d7677d8718d15fc1", 0x64, 0x400}], 0xa00c00, &(0x7f0000000480)={[{@show_sys_files_yes='show_sys_files=yes'}, {@errors_remount='errors=remount-ro'}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x8001}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-'}}]}) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000033c0)={'vxcan0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000003400)={r2, 0x1, 0x6, @broadcast}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(r8, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x6c, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e23, 0x9611, @private1, 0x3}}}, &(0x7f0000000100)=0x84) sendfile(r4, r5, 0x0, 0xd811) 02:52:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:38 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffc30) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0], &(0x7f0000000140), 0xfffffffc, 0x0, [], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80, 0x3, 0x4, 0x800000], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000100)={0x2}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) getitimer(0x2, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r2) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = dup2(r1, r0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, r7, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffe0, 0x37}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xe0, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x7, 0x4, "0c1bff"}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f5afe153bf"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0xa, 0x1, "9a99396439f3fb7d7cd4c5c601"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4d553d0f443c"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x5411, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) openat$cgroup_ro(r4, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r4, 0x4) unshare(0x40000000) [ 246.086980] ntfs: (device loop3): parse_options(): Unrecognized mount option appraise. [ 246.125773] ntfs: (device loop3): parse_options(): Unrecognized mount option smackfshat. [ 246.144381] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 246.208314] Unknown ioctl 22026 [ 246.257709] IPVS: ftp: loaded support on port[0] = 21 [ 246.358669] IPVS: ftp: loaded support on port[0] = 21 [ 246.633382] IPVS: ftp: loaded support on port[0] = 21 02:52:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {0x0, 0x2}, @raw8={"a357b6b140cbb60000fd985d"}}], 0x17) r0 = getpid() bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x29}, 0x10) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0x4) pipe2(0x0, 0x80000) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:52:39 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x803d7, 0x10000, 0x1}, 0x5a) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:39 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nilfs2(&(0x7f00000000c0)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="18d5cbbec5faafc8a46dc3d4d53672d03de9d2ccc4a4cfabeffb843793cac951b865b8e95b9ff615dc6ba59f6f67d49b5a76e1da513d4e4946b078b2375c582c1a8e35f1d56914256b96e73d5e422c534e35b8c5d68d8758ca88feea25a565", 0x5f}], 0x40, &(0x7f0000000280)={[{@nodiscard='nodiscard'}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@order_strict='order=strict'}, {@order_strict='order=strict'}, {@norecovery='norecovery'}, {@discard='discard'}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000040)={{0x1f, 0x7}, {0x9, 0xce}, 0x5, 0x1, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000029c0)={0x0, 0x80000001, {0xffffffffffffffff}, {0x0}, 0x1}) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r7, 0x0) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x4c, 0xa, &(0x7f00000028c0)=[{&(0x7f0000000340), 0x0, 0x6}, {&(0x7f0000002b80)="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", 0x1000, 0x7}, {&(0x7f0000001380)="72fd7ba2dae1fd780450d758fcbc6c7c1ab45d46ea59daec5935f98b7ee408ac16670c8e94a3e99c7d96151b75c6b504500bf11f3222473d67a5784fd7b094bf8088f809de61caf589af45d84695d8b108cb45e342f7118d770d814ddea41d7bfd8c9e44335abe51d70bdb37193bf7c52aa5d7059a60099803517067e711503d9fe15cc11198060d1a8372ba7ad5fb0c9f250465719419473635afa013514091079fea010ffc8316d61d8ac8376270dc9ca1126add982e82f4f98a6094349618e239801922bd", 0xc6, 0x80000000}, {&(0x7f0000001480)="da81993ab96c13dec702d86a80157fef2277577eb41f6027d7b60b74050aa461d534d793815fcaa37d872b71bd3dd2f3cec9543d9beaeaae16fa63aa2eeca3d6081b7a9a6b7e33c798f47aecb80388c68cfd3581acf8d96080de5a143d92cbef8937be7f26cfbd080e66e7df6b7b58a3da1e3eea25f22c6035d93f803d847b006760cf2a155a652c77e637b7c661a41661f9018763a6dfd76dcfd819f802ae279833696dc7f4679cf1d1581e115859fb188cd2881e1b98b5c929e52ec41363c6d2b2a1a4785ce4754841832e385c3482fdf40e9fa9cce3c3a1317e027eca5ff5e99c286c4fd6dde5e173ae73053a", 0xee, 0x101}, {&(0x7f0000001580)="1473205cc5228a3042edd031ea71d262645597ae00ec082169963e0656729dfb2b", 0x21, 0x2}, {&(0x7f00000015c0)="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", 0x1000, 0x9}, {&(0x7f00000025c0)="997d38f5ae4526b373cf660db09f6da051c6033cce755d3ac0dd2c1a9165c8e61500eca671cce28f3f7d1aadeb6df942f8f5675fcc20c61d7ba620f1aaf718c824f8a0d6744b190947a50db5b2134847bc942e3817c0b132cb3209442b282900b9ba5e5727d40569bf5215440f45dd74f08763df4446f520f0965bee4c8768052d6d4627a998fd235775faaadcf51928a52a830b597cc95f0337afe7e07260efa4e27110f17c9ab805a2d22b56ae4975411a18a33224d17131984bca678fb219690625f3fa23", 0xc6, 0x1}, {&(0x7f00000026c0)="a67246f6f230cf8962b6822ff6b95c34c0b4ecc7c35596303b510b39da35b0525fadccce1e4015e8fb1c2e2b7a685539e4dd8e6ac2bf78153673d01e04e309a286aec5b737ece1b431d1cf8a13104b190e038396063dee289ebd29e97d7561b06dbafeccaad06d2ff7af92704c4b28668de9a0e2077e8251b1b7185fd3de43b6c5944ecb75625c86b97c1c2ea845df", 0x8f, 0x200}, {&(0x7f0000002780)="cf73c0550a30abbd94f50e9ba37504269e2393379d4c1ff5285320c6f794855babd0489b65b6144776a9a2c270d178b31b863dbf6d57ec9df0829324778c4ef75178a44debe712238c28b8ac75a3331f8a42fad7408ac8616e5c5f891cc3774652c74a334df40260f62af221198815fdffe85ca2fc2f66a12133ceb7d66577265321ee980025060aba7aaaf857c70d05cf6ea091773c23ca938593515cdefe4b151104ac846101c1e14785dae679cab513844020b2da1ee17836c53ceb7e70feaa17820079d7b97c56ee541032cf08e0fd43205d68af410717065e686888f8431c4db6e2c88021bb932e9f", 0xeb, 0x8cf}, {&(0x7f0000002880)="8aab095042cd437abb890ffa88e329de48b27f124545d17dd1004bacada0dbe670f8", 0x22, 0x40}], 0x800, &(0x7f0000002ac0)={[{@discard='discard'}, {@nolazytime='nolazytime'}, {@nobarrier='nobarrier'}], [{@fsname={'fsname', 0x3d, 'discard'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '('}}, {@obj_role={'obj_role', 0x3d, 'nobarrier'}}, {@audit='audit'}, {@uid_lt={'uid<', r5}}, {@uid_eq={'uid', 0x3d, r7}}, {@obj_user={'obj_user', 0x3d, '!&*4+'}}]}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r8, 0x0, 0xd811) 02:52:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x8, 0x40, 0x6, 0x4, 0xe7, "9cc93dfd5148ae34d9cd0f794607bee6ac525f", 0x81, 0x7}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) [ 247.966531] Unknown ioctl 22026 [ 248.010036] print_req_error: I/O error, dev loop4, sector 36028797018963960 [ 248.023221] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) 02:52:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x8, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100001f, 0x13012, r0, 0x0) 02:52:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 248.075856] NILFS (loop4): couldn't find nilfs on the device 02:52:40 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x840000000400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 248.201623] Unknown ioctl 22026 02:52:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = signalfd4(r0, &(0x7f0000000080)={[0x8]}, 0x8, 0x800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x3ff, 0x423, 0x8, 0x2, 0x9, 0x2a9e, 0x15a}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$ppp(r2, &(0x7f0000000040)="4dc3080c8e06e82a94280862efe8d32151c298f00809b8f937f1349225ba99", 0x1f) [ 248.274057] IPVS: ftp: loaded support on port[0] = 21 [ 248.388922] Unknown ioctl 22026 02:52:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {0x0, 0x2}, @raw8={"a357b6b140cbb60000fd985d"}}], 0x17) r0 = getpid() bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, 0x0, 0x29}, 0x10) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0x4) pipe2(0x0, 0x80000) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:52:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000000a00)="7194999ab2e1475f220223182f77fd7195bceb48f77e699a1f2b", 0x1a, 0x7}, {&(0x7f0000000ac0)="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", 0x116, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRESOCT]) getdents(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000a80)={0x2, r2}) read(r2, &(0x7f0000000380)=""/233, 0xffbe) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x7ff]}, 0x8, 0x80800) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000340)={r5, r2}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x559502, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000dc0)) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/input/mice\x00', 0x103040) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xfffffff7}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1b5732f7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000080)={0x117, 0xe, &(0x7f0000000600)}) 02:52:40 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$RTC_AIE_ON(r6, 0x7001) 02:52:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x401, 0x4) 02:52:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 248.999656] Unknown ioctl 22026 02:52:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x103000, 0x0) [ 249.093974] audit: type=1804 audit(1603162361.122:177): pid=12102 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/106/bus/file0" dev="overlay" ino=16292 res=1 02:52:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:41 executing program 0: unshare(0x40000000) r0 = userfaultfd(0x80000) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/52, 0x7ffff000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0xfffffffffffffff8, 0x6}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x1}) socket$inet6(0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 02:52:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r0, 0xffffffffffffffff, 0x0) bind$rds(r2, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$ax25(r1, &(0x7f0000000440)={{0x3, @bcast}, [@rose, @remote, @null, @remote, @default, @bcast, @netrom, @rose]}, &(0x7f00000001c0)=0x48) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x1f, 0x1b, {"0af5af7b3b87636a336b342e43ab9cb4"}, 0x80, 0x3, 0x9}, @ib={0x1b, 0x4, 0x8000, {"e59739b52a66dc48e29ccb7e4ddeecb0"}, 0x80000000, 0x6, 0xfff}}}, 0x118) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000020301030000000000000000e6ffff0208000340000000020800fb3f0000000908000427cdf14f931e28c9a340825451034cc30ca770c0d535034337e3b54d772ded8421608d5f2841e477b3bc3f58aef5f8998f07f9cb9de5"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000380)={"21a516303e5f510b86f8c90d81e355ff5b192ce78d7ca2200867eb4f36c7", 0xffff, 0x2, 0x0, 0x9, 0x401, 0x7fff, 0x8, 0x7, [0x3c, 0x0, 0x8, 0x4c7, 0x6, 0x400, 0x8dff, 0x101, 0x8000, 0x4, 0x9, 0x7ff, 0xb807, 0x1ff, 0x101, 0xc14, 0x6, 0x0, 0x74fc]}) sendfile(r5, r6, 0x0, 0xd811) 02:52:41 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) [ 249.255708] Unknown ioctl 22026 02:52:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3ff, 0x1ff, 0x3, 0x3, 0x8, 0x3ff, 0x1}, 0x1c) r1 = msgget$private(0x0, 0x81) msgrcv(r1, &(0x7f0000000080)={0x0, ""/76}, 0x54, 0x1, 0x800) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 249.300827] IPVS: ftp: loaded support on port[0] = 21 [ 249.322728] IPVS: ftp: loaded support on port[0] = 21 [ 249.478312] audit: type=1804 audit(1603162361.502:178): pid=12132 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/107/bus/file0" dev="overlay" ino=16287 res=1 02:52:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2080}], 0x200401, &(0x7f0000000040)=ANY=[@ANYBLOB="6a4c5e80fc19edf477851d30a389a071666d743d76667376312c00"]) 02:52:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:42 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000240)={0x65, 0x47, 0x1}, 0x7) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x400, 0xffff, &(0x7f0000000000)="0e140ad48b9d0772753b007ab58e1452ba7960d731bf5abfc4314925a71e4a8c762967a8304909d811110614a36ce247a5a8c4f816d6ee47ba03adca20808b743a4923688601f7bb7f5501f1338d08800aad44733a079f699ae266fdc36c36ded8cb1f9e4e4ee1463c16260d62931efd954a63456ab198231de8ac6fc2a5e0f1b568ad13e22922b17fb755ff376c12875c3ae24d430ffedb9b29e3c18dd1d405c15ebfde3001fa45ecd2cc95fbd8"}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000881) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xfffffffe, 0x4, 0x10001, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000001c0)=""/9) 02:52:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) sendfile(r4, r5, 0x0, 0xd811) 02:52:42 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) [ 250.581984] Unknown ioctl 22026 [ 250.605466] EXT4-fs (loop1): Unrecognized mount option "jL^€üíôw…0£‰ qfmt=vfsv1" or missing value [ 250.636214] audit: type=1804 audit(1603162362.662:179): pid=12207 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/108/bus/file0" dev="sda1" ino=16311 res=1 02:52:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x2, 0x1, 0x4}}, 0x14) 02:52:42 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, 0x0, 0x0) [ 250.735553] pic_ioport_write: 88 callbacks suppressed [ 250.735558] kvm: pic: single mode not supported 02:52:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = msgget$private(0x0, 0x200) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000000040)=""/230) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) [ 250.735622] kvm: pic: single mode not supported [ 250.843285] audit: type=1804 audit(1603162362.712:180): pid=12193 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/108/bus/file0" dev="sda1" ino=16311 res=1 [ 250.861913] kvm: pic: single mode not supported [ 250.861969] kvm: pic: single mode not supported [ 250.919789] kvm: pic: single mode not supported [ 250.925438] kvm: pic: single mode not supported [ 250.934551] audit: type=1804 audit(1603162362.962:181): pid=12218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/109/bus/file0" dev="overlay" ino=16299 res=1 [ 251.020314] kvm: pic: single mode not supported [ 251.020374] kvm: pic: single mode not supported [ 251.031545] kvm: pic: single mode not supported [ 251.063264] kvm: pic: single mode not supported [ 251.075011] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 251.161747] IPVS: ftp: loaded support on port[0] = 21 [ 251.220548] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:52:43 executing program 0: unshare(0x40000000) r0 = userfaultfd(0x80000) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/52, 0x7ffff000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0xfffffffffffffff8, 0x6}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x1}) socket$inet6(0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c00028006000100020000000a0005000400000000000000c46ce6b4be8ed7f81a8f878a31f66f4e25cabe065d13a150648a4819b949bf3eb4ff597565a0bac0386133e47ada9d7c54c74d3b2765e7aac3e677a649a549d679728422e0128516b9e53ec7ccbdf844eb6f255a4ff89ad52b7f06220b2aea620cb6ebab71e41899088ee3589e3ec47337a1935d3e1c1698fb790808d2cc71e2eeb1d1754626c283960a4dd89560aa0d61ea2dc13f6b364b1ed604610fb11ca601d4d09d7458d743e1f2ef9c8bf9b08239b2ebef7b25ac31d1ff2145d6d4793c55694a88ae7f74ab8a9b19c74e08e609a790"], 0x48}}, 0x0) 02:52:43 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:43 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x0, 0x8000, 0x4, 0x10000, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x0, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback]}]}}}}}) getsockname$packet(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x40) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 02:52:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001480)={0x0, 0x4, 0x4}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001880)={0x0, 0x0, @start={r2, 0x0, "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", "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"}, [0x7, 0x5, 0xfff, 0x6, 0xffffffffffff8000, 0x7, 0xffff, 0x4, 0xfffffffffffffff8, 0x2, 0x0, 0x2, 0x67c, 0x4a, 0x8, 0x0, 0xc51, 0x6, 0x7, 0x1, 0x10000, 0xfffffffffffff758, 0x7, 0xccaa, 0xa7e, 0x4, 0x40, 0x4, 0x0, 0x1, 0x4, 0x2, 0x8000, 0x4, 0x1, 0xfffffffffffffc01, 0x3f, 0x9, 0x1, 0x3, 0x9, 0x8a, 0x3, 0x1a5, 0x8, 0x3f, 0x2, 0x3, 0x7, 0x8000, 0x91, 0x7, 0x0, 0x4, 0x2, 0x100000000, 0x315, 0x0, 0x5, 0x5, 0xbe, 0x0, 0x0, 0x5]}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x0, 0xabdc, 0x7, 0x6, 0x5, 0x80000004}, 0x1c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000480)="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", 0x1000, r3}, 0x68) io_setup(0x0, &(0x7f0000000100)=0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x4bc081, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) io_submit(r4, 0x5, &(0x7f0000002500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f0000000180)="e75b654740efd431a4be30afe71e58fa", 0x10, 0xfff, 0x0, 0x1, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x92aa, r1, &(0x7f0000000200)="7620466d73f5e3427ebe06e7c91b179b06c4400f3bf7f9150a2253ccb72db017852832141aea26d431365901a758556c459dac5e28244b2accc8f0ecf613abde8233ab6d5cf0f284cefcbd66cd3113da887697c949790612dd17ed19cdaaef674c40fdc6357d488c20a007f924aa46f3da138d589e603eab033ce753818a", 0x7e, 0x3, 0x0, 0x4, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0xe580, r3, &(0x7f0000000300)="d3239a24be76b7999862ed765085645b15cedca984af9344235a1ecabc0f8a5238b2179b7ac3cd5dfdc273", 0x2b, 0x3, 0x0, 0x2, r1}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f00000022c0)="ac61aec6aa84fca57b3250ca5760a8b274709d2ffa8227e0929dcfee870de55555f0b8378a13676f2f7653b956cf677792378795bd0e0d2e199b31f0a66ee9ff64e1ba76f6f4285ad1920dc64a2be2183dd97dd1eef011b25c0bfad17bf8b140cb4efb13b708a489633411ea880b6a2f61aafc925b7f78ec76a06320cdcb8cb0f70a8721c3c800a615dfc2", 0x8b, 0x1000}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x6, 0x3, r7, &(0x7f00000023c0)="41136062fecdbc81f33b03778df118da8ebc1a036c5787a070bde72dc8cc16513a73dd34c1474a985b79f25aed8c9f47013ac4ce11378ba0167c8f59c5d08b12f94acb8b7b40a2e77b0dfc7f2bcd78ad2fe08dc54657e31d92d3b872876ce94ea69f44ccb4a833aa992800fe9e59347e623ca35ae4aa0074fd827627fcd8625bfc188cf71d8ff2369d44ffed20da3951b143c5b61e2818fb274bc3d50991474b350ab22fbf1a4cefc241f2d27eca74afa025782362d16c4aa34fae335a31a482102422843da47941f650ef7fb38814523320846f3804341bbd9e60f490b287ee8ee4cb90891384cb917a", 0xea, 0xffffffff, 0x0, 0x2}]) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd812) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000180)=0x5) read(r7, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x800, 0x20, 0x6, 0x6, 0xbd7, 0x9, 0x0, 0x9}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000000c0)={r8, 0xf5}, &(0x7f0000000100)=0x8) 02:52:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 251.499381] Unknown ioctl 22026 02:52:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 251.554081] IPVS: ftp: loaded support on port[0] = 21 [ 251.566329] audit: type=1804 audit(1603162363.592:182): pid=12263 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/110/bus/file0" dev="overlay" ino=16303 res=1 02:52:43 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 251.782629] Unknown ioctl 22026 [ 251.827570] audit: type=1804 audit(1603162363.612:183): pid=12278 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/67/bus" dev="sda1" ino=16307 res=1 02:52:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:44 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc8c41, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) 02:52:44 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x0, 0x8000, 0x4, 0x10000, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x0, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback]}]}}}}}) getsockname$packet(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x40) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 252.137132] audit: type=1804 audit(1603162363.702:184): pid=12284 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/67/bus" dev="sda1" ino=16307 res=1 [ 252.163385] Unknown ioctl 22026 [ 252.363492] audit: type=1804 audit(1603162363.992:185): pid=12300 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/111/bus/file0" dev="overlay" ino=16302 res=1 [ 252.387913] audit: type=1804 audit(1603162364.052:186): pid=12270 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/67/bus" dev="sda1" ino=16307 res=1 [ 252.418271] audit: type=1804 audit(1603162364.052:187): pid=12270 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/67/bus" dev="sda1" ino=16307 res=1 [ 252.447340] audit: type=1804 audit(1603162364.412:188): pid=12331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/68/bus" dev="sda1" ino=15851 res=1 [ 252.521435] audit: type=1804 audit(1603162364.542:189): pid=12332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir288703797/syzkaller.Qy1GSf/68/bus" dev="sda1" ino=15851 res=1 [ 253.861728] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:52:46 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) sendmsg$unix(r1, &(0x7f0000000880)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000140)="3bd288c52c4817ef261bdea32a5fe51c2613b9ed2beb404059a025941e6c0bc7791ef079276c7f29c4d0512cde36eb775e77dbebe82df749f75a89389e0444d09afc411652", 0x45}, {&(0x7f00000001c0)="eaf697129f2161d4c2a8027032368427059ff436b10082d0bdf8b283dd78a628a1dcbb6d3434a92f3b36281ff64fa184f07af5a3dfa1b0a71983335aa7eac6b87e3f2eff7624927d1630d9398b39189be32d77246ec6f4b329a053b73c4145d4cceb84410ba0e040548823ba044522485879a51e66e52f8c9040ae4197e9205c6f4027ee573fb3706eb8aba9595d72ec54447a7d91e075c3c2ead071d7bfb51920cd4f0fdd48140e5e87e3a36e19bf01eab613c9a5aa7fa6d0354fba09fccc84b77f86ede7a557494dcf52f7623f6da994e5123a5bc6bac30e852301e8d5166ced7273b07083627b6a1041b8ebfafb68fda932", 0xf3}, {&(0x7f00000002c0)="2349d87960f92a022788f905d0384635a7fdf470506767cbe27f02e6a550bf3977b79bcab45fe55da2ba45f83c61a0365257db850dd2d96b388bec6f2ae2e08f575f69796140c538bfe66cd3f429e5972f461f073d5f601090a3ffd8e826d46f5b4883050bcf2fbafa6ec413c5e9ba6af780fca2a94ca714ffc9da9c0a8588931e177e01d0857819b54a8684a1abd32e52b5f76a7f757f56a4c6f9954b8546b0231f7dfd021bd6b017abddc04c56b134c6", 0xb1}, {&(0x7f0000000380)="88ad2642b57a292132ec879b769007b42a6a8a9cfefbb8b2397b16150a4403c3fc07b21a93d83c3ce4b23a510356aa5ef73989a935d8e594ccf56d3d908d5495ddc22215694e8242fe9e29cc951a38f2e32380481dbb05bcd790b23716c223463ed4c46e5315fe007237f6767be2cf7d357cb07eba099be18ad0b0a4559dca54b8df4a269efc", 0x86}, {&(0x7f0000000440)="5bceabfecb76ccff343f5895fc5b3d9c0818cc07b6d744644a6dbc81b741f50b932d2967ca43601e906951047a9997eb884735431ef185753e05b4e1ff0db94976e93d3ab479af2686c54d3da1a6960a3eba32c2594ea621c7d5199da5c57c27804d84d66c392ac5265f460f22052895c2aad82e394f56368d55ee4bfbd954e4bb1ca6e7ef941f3ec5ef6b1782", 0x8d}, {&(0x7f0000000500)="3d8c68dcca182b6f2fafade556755ed09f6146a19a84b10593f0d2760318632b3bf1edc1720e55075196fb958a1d60125ed5e30053772506b581d82e8a1bd152dce63ddbf3a11b96513c3f4a077219857d3b31dee7f7730147d090f30b9484ed59dd", 0x62}, {&(0x7f0000000580)="b1217598bc1e284feead1be5966a686423ed55a1b561938b6ecf1afede302768dcb884ea2f3bc192a68de913ba3b16df30373e8f4c95457bbd122e52c8d4275c3a93c8855c4bd107613fe8aac1bfecdee8a5e45b9ba86e26f84a1beaad3c95163a8682fff2fdd82911d178ebce12922cd3afe7e6ff94000a79baa50d187ccaf67477892537f0e90efbed4f69310521b13f5b2666484f5d0f0f9e3e9f251326e4923d6ce5daef35f21e7033ebd1aa7f5acce9b1e74865f76cdb1609a4ceb4fc9805042684ea94987099", 0xc9}, {&(0x7f0000000680)="ec140d3f6f1071de01aea6724a69b6c4929cd7cdda00d32df8375257ab4ebdda775ccde2a7cc8620ee3a3b03b9ab959c924676e2abf47ab46164682f47783627abe0a46a27a85bfe41f2f60de4bba2892227f8bdf901b078b61eaf16ce6d6d44ca734b5f5bc0db04334cf7c64e7e1e9b4bd1", 0x72}, {&(0x7f00000000c0)="6e0c02fda0aa437b304a25c844b6f6da7010790416556ce8eb0f984f175cb733a0852f8239a4", 0x26}, {&(0x7f0000000700)="a6e996ab070ce239bbc15787fa3366adda90b8d5c86a7138fa54a3804c4200854dd33780470e579208f3773c6a83a6e776969f75231237b59a2b1a294e6bc9591428dd60c89f93b8c431331790dc8929afed1e9404cd00edb08601e60bbde802975628a52135c3cb2a86caf9b79e992e26934b1b4d5d96a69ec6cc4caa7fc72f24d36a7a8b6c", 0x86}], 0xa, 0x0, 0x0, 0x4000}, 0x9ed6a505867509c9) 02:52:46 executing program 1: unshare(0x40000000) r0 = userfaultfd(0x80000) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/52, 0x7ffff000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0xfffffffffffffff8, 0x6}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x1}) socket$inet6(0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) [ 254.051430] IPVS: ftp: loaded support on port[0] = 21 [ 254.086879] Unknown ioctl 22026 02:52:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) exit(0x3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 254.493593] audit: type=1804 audit(1603162366.522:190): pid=12355 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/101/bus/file0" dev="overlay" ino=16318 res=1 [ 254.498139] Unknown ioctl 22026 02:52:46 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x1ff, 0x1000, 0x1000, 0x20, 0x6, 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 254.793049] Unknown ioctl 22026 02:52:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x840, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 254.950867] audit: type=1804 audit(1603162366.972:191): pid=12401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/102/bus/file0" dev="overlay" ino=16326 res=1 02:52:47 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x4) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 02:52:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.200542] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 02:52:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x8000) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:47 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000080)="c77d24bbab1444f05570b52db069a33c5419a5fbc0b04f880fb9011200527f810e1575708ea0430c63e928db1741fc1ff3b7fe90350918f23410734e4abf8e394affbc8df3cefb7575", 0x49, 0x23bf}, {&(0x7f0000000140)="4ef8651c70a5a06b5736f4e0691fdfec0c65c909da66aeb2c5e6942b783a9f54a05a5e54b6f3b2991b7b94b42cb7d227e14eb24388ad3d4c936f7853e1cd5ccdd96e6c7e593be0d70f3f2a40a74f8792cc52c81b310f773c77306743f20bc461472f1b01f327b540689fe138ae9a017f37cebc7f044253e8271065952513322eacabaf31f1d76e8b32b742ab8c01d72618f2f890aee07f45ff2ba782296f5fc256becc1390b22a41ff6ab7bee22e0d0e30bb8b80416961f7d9474b2011f7a2f82625a0b0dd6d3677c6c0225b4262a5f03e14d7369526b537e0d4e32fe298606c52c3813ea014709362efa87eb2666b26", 0xf0, 0x8}, {&(0x7f0000000240)="6648213ca2a8411834fa", 0xa, 0x6}, {&(0x7f0000000280)="53dd020c13b6c95a72f45f519861b7b8afd58b5dc03d1b3ab9371ebfb7021c8c46b592d2f3e1c4c7c82967c66d06fc803147e1d8cd3088792b99ca33e911ee77dda8358bed8d51e0e896825143bf5fcbd42859cb01f8101c5e9b06c1bde1d7be26602c729821e3db09a50c9ea3133f197fb0e3adfb3d2c39d5c322c936205389bcb160ac4b0a56", 0x87, 0xf1}, {&(0x7f0000000340)="3ef8e4588e155526c8b2d00d96b42f60011c2dfab77f0f95495a61c0dda38cb7b4726a4acbc765a79d881839fe76480d04a4053e17c6eddfb783be5a376cd62995c3fb847b5c03e400c2ca055424f9d3a51550f74dc77a173091683d5a49e2928238a9642d4c0b64c94d1f8ee3700507e96b0420cdfdc4483e079fdc0da2e9f0f61a5625b9b18a0bc17c6f0b9973b70b2e56997336aea9dafd4381a8dfdd33cd42d5858af172fad1e01b9cd7e155463fbf812bd78abe7b48260e", 0xba}, {&(0x7f0000000400)="d4ca0bf37d9fd94db3f2f6e42bb702c808c2eae1e41d8228a4e1276b939c", 0x1e, 0x3}, {&(0x7f0000000440)="843567fac39156ac5a9413651064cd650d888807aa76736ce6f835054179a7d83063ff9d7bed37dd9e65e47f9f33e020e2a7efe4e4e085d32c5fc8440f38bf18c63eb14b4d88751e0c2b98ec21054b4afe33641c8c5a8de69e587299ca18714573988fe87596c8c29e8d6b414ffc5ca275f5dd9070", 0x75, 0x2}], 0x408, &(0x7f0000000580)={[{'!'}, {'}'}, {'--'}, {'&\t%/^*{!'}], [{@subj_role={'subj_role', 0x3d, ']\'}\xd3-'}}, {@appraise='appraise'}, {@permit_directio='permit_directio'}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, ']\'@*{\xf0,e#\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_lt={'euid<'}}]}) dup3(r0, r1, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 255.601114] ADFS-fs: unrecognised mount option "!" or missing value 02:52:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:47 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 255.705726] ADFS-fs: unrecognised mount option "!" or missing value 02:52:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) munlockall() 02:52:47 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:52:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = signalfd(r0, &(0x7f0000002c40)={[0x4a]}, 0x8) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000002c80)={0x7f}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x2, 0x1, 0x6, 0x0, "7f7daeb0a1c5b743fa8d8b3add301c9a216c4b4fee61c88f9dbd0f45e75e318520c2562d53adad16a350b91fe4d46f66d891ba413f7b25ee7cdc854f9add12", 0x3}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)="3f65a56794450500bef453fdbfb48ae69fd7e21a4f07848e0039e84ff1584894c2b0a5db6da7491c78e9aeff6d0ed7d816cf8ff060adfd66babaa4f9a13f5586f94eb931fec3793fdefc04c35c1f25b539007ce2ea4c3ab271e74f87d48082f76ab406f799316f7357d8b75ddf2950a2325f59b110a8aae5c865a809e32699ffaeaff69b9922913ac177c51c27bc1771f86cd11ec93a05481fd4159d24a1c3bdff678fb7b591712fd04cbb6863f9cbe64d6b610e7bd946c46605057ad0819b637c617fa8218fd70d5953e8b51930e616a5a0d088660ee0440d2323b1221faab5c43f0da8ca01a3c71a930fd855fb988cad9fc9d82f", 0xf5}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="4ecedf0234c8d96b381b57bc3224524c358cab89c6e2f05f2efc9af5bb3242e3b11a3473ae81b29439082fc17b1619fe60ecd14a532efa1d5d2f45373e2bdf2fd0bc016cff8179ca7540a54e97b65cf676e57d4db73d59926e6bdf88b076def47a3f1524f05a385299a02b0e4d36558f5578aa4407fe89709fca5f68ff2a1c48c3fd2bca9c072148f1cae07b09b7b1db950323cd611129d4bdabc3e4ca37e6c4b8e84ac3f7de0ab2b47cc8bdcc662ecdec4df7bcb6ca9341fc967db73529aade43d0ee56", 0xc4}, {&(0x7f0000000080)="1e9f1f0e112aad9b4cddf9730e97f82fe6a4e5670b9d312801af3cd36c14505d48609ba078ab3883dd680d7386bcc536b33e7afb1d8957f46e1357b5", 0x3c}, {&(0x7f0000001340)="7d3e08962ac2d3e4c93254e134b3a44de5c4c2cc54cda2929676cbbbcdd9935cd38f221cf4a5e484d865e85a3e7c171f8981e94dfe28af28f20bd60572dd334049c183c234494758575f419a09d01dce14fa6095f4562d512026b3eb519faa42e0ffc753af4bbdb2f274a628c98beb3022b6dac9e01dce9a70a9", 0x7a}, {&(0x7f00000013c0)="23b9970feeb36293518af0e0be4f4dab8782d412b13367392dea149401090d049b9c5be9ac61e3a911071358e74dcac6f8279bb61cc249ed2b88708169821cbf39dfaeb90e1f839258642f644a2ddf45966ba51b47cbab2b3d0e846cdf1535a6c5fefefac0d70b2619bfdd5770d6ed0f947e85a4d349d47f9df08f86ebafa2725e2922662fbbcae703887ed87eff6eb744f78fbd985f22a45e0a3512c242cae1a488c9218d2e41a4ce638f207d8f7b22d53ab02a2b62f7ab8de8432656dfac3b", 0xc0}], 0x6, &(0x7f0000002cc0)=ANY=[@ANYBLOB="00010000000000000000000000000000cd9d3ced90c6bb056d4533ef0e21c8841ca52e209c3d98f63a4d16b751267a7f9d56b25e7418829ba20ffb61496a7e0096a48fdb9b770c9dc45bbf0a8a5c34e899d09643601351b4b46c1e079bd17d6a20b07a50b9aa09fc9f87f2d8b5d0e3460a0be68703bcd9f6ed5718406b5a88e608d32762efb6525fee4f3b61dd00d7e22d61c737681f59d97eeb91838077274758aae29d8cee0c12ac2634f5c06001e2380207d627d3b76c9af0f051a6a2105821b007728938595011914c031e5d7239a75f2928bd6362c638821d2c325c1c4eeec5610133ad5db86e34cf0ba582f0bcb6d9399db7afc672964d42ff00f4601b4d995db88bda6d3f8509d38b74ac25393fe9a3f8d2fbcd224c89b271703c756b96b17d0953447f95d0363a926df3a1f480e6bba21c220a0ea75719eb99e83c4df75d991f59e4e22a27d3ae28196035000000"], 0x100}}, {{&(0x7f0000001600)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x1, 0x3, {0xa, 0x4e21, 0x45, @dev={0xfe, 0x80, [], 0x3c}, 0x81}}}, 0x80, 0xffffffffffffffff}}, {{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0xfffffffc, @private2, 0xfff, 0x1}, 0x80, &(0x7f0000001880)=[{&(0x7f00000000c0)="2093549b75382f5242", 0x9}, {&(0x7f0000001700)="ca614a8320d7791df6ff1de62fe321036cbdf6382604feb9f5b5abc78b290c7a5aaffbf0eedae77516c8189d0c26d6d18771eca2501a5e4757d3bb6cd07681633ec774f3e02db6b03e21734bd910498ac1690ee7d49f62c0d4349a15acf804aa8ef0db1f19d8a228a6faa23d3d1abc8588df8ef8e03ed8e2cc83e65891e64c917c8afc948430071c7b7908e4ac425378859725627cd777977887d298b00c1f56fc66bdcaf767bdca6b425f47a060e64c57d031d6b15c1aa4b0e8f02deb17fb01355d4fab364071fed1a4987fbcbc161855f93b68", 0xd4}, {&(0x7f0000001800)="ac0aea3ebd39e883d88f", 0xa}, {&(0x7f0000001840)="5573b89e818dbcd67def7015ad452b3a45a22d7e620c209b8ff42951c4305c66d0dc99c1e0a9283d740a65467af882e6c0b9ceb3", 0x34}], 0x4}}, {{&(0x7f00000018c0)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="7c1a0ff838b454fadd5d4a664ccc2f8cd348d0187620410a7a746f1e510736f4d1ff14f2a681f6efa357d967d84a632262c14523af7c28078ed209f68211d31d3d45f66651b938a54bfabd4ccd437fed86b119a491ca9b6adc57251a6cf8e5729d489c34f907ab2af10f2d9758c8441ccdcf1002644bd4022f9e1b1517d2a8ee57bfa81961ea702c8cb4fa5d5f191f68a1ff73", 0x93}], 0x2, &(0x7f0000002a40)=[{0x60, 0x184, 0x10040000, "9d408b03341d11fc3a83f53a1d83cb8b061cecc89a256a480fe8030925e5b8df7847535399043689bb426088e73b4da6b25a079c88ed562c2f55586960b0712fb54d3a5e7b3159b0d98ea8b6d7"}, {0x98, 0x110, 0x2, "fd158b1777e73050eb9c42aa36f36385192e396c1e9f97e175e26797c70161e91355e316b927086f08405815dd88f2716b5a1d30e0653dce6651eaa1d83a946a7f9012744071961f39ae8b255edd7835f25dbdab74922afe66713eb7fa738053f5aee25718865aaf7cf21cfb35c7fa5b71451d7c06b0ee4b68cdad41be02a833a6a88016dfb2"}], 0xf8}}], 0x4, 0x80) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:52:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:48 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="02015500000001000000ff07000000fffffffd000800000000000000004000ffffff8100000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) socket$inet_icmp(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x40002, 0x0) fstat(r2, &(0x7f0000000100)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x20, 0x8}, 0xc) 02:52:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 02:52:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 256.769097] loop1: p1[EZD] p2 p3 p4 [ 256.774410] loop1: partition table partially beyond EOD, truncated [ 256.798138] loop1: p1 start 1 is beyond EOD, truncated 02:52:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 256.820218] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 256.860517] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 256.908211] loop1: p4 size 32768 extends beyond EOD, truncated 02:52:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 257.042646] loop1: p1[EZD] p2 p3 p4 [ 257.055557] loop1: partition table partially beyond EOD, truncated [ 257.089020] pic_ioport_write: 32 callbacks suppressed [ 257.089026] kvm: pic: single mode not supported [ 257.089102] kvm: pic: single mode not supported [ 257.100292] loop1: p1 start 1 is beyond EOD, truncated [ 257.100315] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 257.129442] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 257.152478] loop1: p4 size 32768 extends beyond EOD, truncated [ 257.153059] kvm: pic: single mode not supported [ 257.153128] kvm: pic: single mode not supported [ 257.186918] kvm: pic: single mode not supported [ 257.206140] kvm: pic: single mode not supported 02:52:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 257.224514] kvm: pic: single mode not supported [ 257.249937] kvm: pic: single mode not supported 02:52:49 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="02015500000001000000ff07000000fffffffd000800000000000000004000ffffff8100000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) socket$inet_icmp(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x40002, 0x0) fstat(r2, &(0x7f0000000100)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x20, 0x8}, 0xc) [ 257.270391] kvm: pic: single mode not supported 02:52:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.298715] kvm: pic: single mode not supported [ 257.361349] kauditd_printk_skb: 1 callbacks suppressed [ 257.361362] audit: type=1804 audit(1603162369.382:193): pid=12553 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/113/bus/file0" dev="sda1" ino=15834 res=1 02:52:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 257.453963] loop1: p1[EZD] p2 p3 p4 [ 257.457966] loop1: partition table partially beyond EOD, truncated [ 257.481675] loop1: p1 start 1 is beyond EOD, truncated [ 257.508750] loop1: p2 size 1073741824 extends beyond EOD, truncated 02:52:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 257.555779] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 257.564157] audit: type=1804 audit(1603162369.542:194): pid=12569 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/114/bus/file0" dev="sda1" ino=15834 res=1 02:52:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.627598] loop1: p4 size 32768 extends beyond EOD, truncated 02:52:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 257.740877] audit: type=1804 audit(1603162369.682:195): pid=12576 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/115/bus/file0" dev="sda1" ino=15834 res=1 02:52:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) [ 257.805610] overlayfs: failed to resolve './file0': -2 [ 257.869288] audit: type=1804 audit(1603162369.872:196): pid=12589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/116/bus/file0" dev="sda1" ino=15834 res=1 02:52:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000200)={0x0, 0x16, 0x0, @thr={&(0x7f0000000100)="f73674e99bde2bac0bf70b8957ebaeefda7eb37d10bb992b0be266548fbee9dd4e3f41c94450a58c41480bd61e41f8b47e5429784a958e4d7efbccd9ae38ae60b3921e01319f9f7a0406caec0710657b5c7c5e51cca7fdaf708702c0b7a069a591", &(0x7f00000001c0)="c820ad22"}}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{r4, r5+60000000}, {r2, r3+10000000}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)) [ 258.056827] overlayfs: failed to resolve './file0': -2 [ 258.090077] audit: type=1804 audit(1603162370.112:197): pid=12601 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/117/bus/file0" dev="sda1" ino=16352 res=1 02:52:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x5385) r1 = socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f8, 0x42}}}}, ["", "", "", "", ""]}, 0x20}}, 0x40000) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x4800) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f00000000c0)=""/143) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)=0x7) [ 258.310608] overlayfs: failed to resolve './file0': -2 02:52:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000006c0)='highspeed\x00', 0xa) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000100)=0x10000001, 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="54841a85ade1c835870274985242aff623792f2f24bf3a97333298f7f323d5d665d2e44ec6fdbf8c5d0fd130d035ad01f0865c2d9fd1f39ccc8ef62b1ae652f0ff80b9891a9d46e614960c19d475e54d6d7c14d78a6c975fd0f30ba9132d8776040b74d13630f1c20ff9de0aa38366441c5285d891f394068ed146886511b48380b4c0ce46389add1a5e2d7ca01942f4ae174a4a86859f4e53a28de7aec0a452d52c40e935828b2f6fe97fb2fe60103fa50eb36946983da5edaf319eeefb3307bc", @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0x100000530) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x299018201bf1188, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 258.359810] audit: type=1804 audit(1603162370.382:198): pid=12614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/118/bus/file0" dev="sda1" ino=16350 res=1 02:52:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) ioctl(r1, 0x217c, &(0x7f0000000180)="c6e4cff33f613303dc23f74f6cd2545ddacb731490c45ad09af56a451b26f6424a7290e642995c2f6c597052c8205f08d2dfcc58b15ebdea8cb19ea233f11a025ff8d10ae83d99751259e2847f18187d149e8f17a926a0e32eff56") setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "3fac12fbea63d738", "3892f0d405000000010000000000003e3b310300", "55fb76f4", "e72a1fc3f476a5e9"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x400, 0x20102) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000240)={0x7, 0x87, 0x5, 0x3, [], [], [], 0x8000, 0x98, 0x480000, 0xd661, "1a6d3d90c9a3976cdc91e1870e4f56b8"}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 02:52:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 258.815645] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:52:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:52:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:52:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:52:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x2, 0xa000}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x89}, 0x8) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x400, 0x0, 0x80000000, 0x1, 0xd, "693c37b9c26bf35b757de8b4ba78e3796a5ea8"}) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5edef79a4057915722686527b3880001f930f8f5587e5ba38a0ccbcbff924498c2b1ad1280027de3b12dfbd7a896ee652c59de7b2e25789471a0c1df598f1358ab0ccd8713560bab088f02e10346c23a6ee1259967790ba2d3ef63534ce14370494ffbd7e52847564dedd145de43cae6970c928f303386cc8e071078f3a04108721e94536132d568e486a2a288e286b3f08a31a2fbfad20c7c92ed15de19533cb2d512876de36faefc976ffc19de65018f1818999741006a32c074e86bad42fd2feb89f33fdc8367cccd924593951aa8361eb2995b7fec54310756f7506735895d07184ea169fd5bbad1eb9b60b7a2bed051776a33", @ANYRESOCT, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4044010) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000140)={0x4, 0x0, 0x2020, 0x7, 0xffffff01, {0x1, 0x3ff}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r1}}, 0x18) 02:52:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 259.595294] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:52:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)=0x72) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:52:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x80104592, &(0x7f0000000000)=""/216) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000180)={0x1, 0x8, 0xe6}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) read(r1, &(0x7f0000000380)=""/233, 0xffbe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r5, @ANYBLOB="701b6e000a00b01f358faaaaaa0c"], 0x42e}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:52 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 260.170732] overlayfs: failed to resolve './file1': -2 [ 260.190361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:52:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) bind$bt_hci(r1, &(0x7f00000000c0), 0x6) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @dev={[], 0x37}}, 0x14) [ 260.211118] audit: type=1804 audit(1603162372.232:199): pid=12711 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/125/bus/file0" dev="sda1" ino=16367 res=1 02:52:52 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 260.321440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:52:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x3}) r1 = socket$inet6(0xa, 0x3, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xfffffffd, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6, 0x10008000, 0x2, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 02:52:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 260.448889] overlayfs: failed to resolve './file1': -2 02:52:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000000)=""/166) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 260.480200] audit: type=1804 audit(1603162372.502:200): pid=12734 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/126/bus/file0" dev="sda1" ino=16368 res=1 02:52:52 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:52 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) unshare(0x40600) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 260.710377] overlayfs: failed to resolve './file1': -2 02:52:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(r4, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r5, 0xd0, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0xdeeb, @private2={0xfc, 0x2, [], 0x1}, 0x7fffffff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0xf44c, @mcast2, 0x8001}, @in6={0xa, 0x4e22, 0x8, @local, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:52 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) chmod(&(0x7f0000000040)='./file0\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000000c0)="b9fe03c6630d698cb89e0bf088ca1f15", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 02:52:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 260.943641] overlayfs: failed to resolve './file1': -2 [ 260.958873] audit: type=1804 audit(1603162372.982:201): pid=12773 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/128/bus/file0" dev="sda1" ino=16369 res=1 02:52:53 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 261.217475] overlayfs: failed to resolve './file1': -2 [ 261.257124] audit: type=1804 audit(1603162373.272:202): pid=12794 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/129/bus/file0" dev="sda1" ino=16369 res=1 02:52:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 02:52:53 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept(r0, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x0, {0x2, 0x4e21, @empty}, 'gretap0\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x68c0, 0x0) lseek(r2, 0x822e, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @null, @netrom={'nr', 0x0}, 0x7, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:53 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x406000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000080)=0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ftruncate(r2, 0x2008001) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 02:52:53 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 261.487070] overlayfs: failed to resolve './file1': -2 02:52:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:53 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:52:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0xffffffff, [0x8, 0x202, 0xff0, 0x4, 0x6, 0x6]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1a, 0x13012, r0, 0xffffe000) 02:52:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:53 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:52:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000040)=0x8) 02:52:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:54 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:54 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x406000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000080)=0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ftruncate(r2, 0x2008001) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 02:52:54 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) 02:52:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:52:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:52:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:55 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:52:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 263.296329] overlayfs: failed to resolve './file0': -2 02:52:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200080, 0x0) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x8b4041, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x6, 0x2, 0x1}) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000300)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0x40044102, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20502, 0x118) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0x0, 0x0, [0x9, 0xaf40000000000000, 0x7ff, 0x7, 0x0, 0xff, 0x0, 0x6]}) read(r5, &(0x7f0000000380)=""/233, 0xffbe) ptrace$cont(0x7, 0xffffffffffffffff, 0xa883, 0x4) copy_file_range(r4, 0x0, r5, &(0x7f0000000140)=0x4, 0x2, 0x0) [ 263.346390] kauditd_printk_skb: 1 callbacks suppressed [ 263.346403] audit: type=1804 audit(1603162375.372:204): pid=12874 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/137/bus/file0" dev="sda1" ino=16362 res=1 02:52:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 263.567847] overlayfs: failed to resolve './file0': -2 [ 263.609144] audit: type=1804 audit(1603162375.632:205): pid=12888 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/138/bus/file0" dev="sda1" ino=15842 res=1 02:52:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x5, 0xbd2, 0x34e, 0xfffffffb, 0x0, "40982e07edea9e639ae175ca5fa75576a4cf88"}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) read$usbfs(r4, &(0x7f0000000080)=""/70, 0x46) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:52:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x8001, 0x88e7c91, 0x5, 0xfffffffd}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9771) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) 02:52:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000000c0)={{&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f0000000140)=@adf_str={@bank={'Bank', '3', 'CoreAffinity\x00'}, {"18284d68ffe625506c5ca8f3f5f2cf59eb87a9e5a6ace0217ce770a8c074cbfbe5651fe959df12e728a7f4fd09f8fb41c265403a7a88ab1cfb63e6f23bbc905b"}, {&(0x7f0000000000)=@adf_str={@format={'Cy', '5', 'NumConcurrentSymRequests\x00'}, {"fe689a89aaef3dec8bb640b8cc73722238aea60fa0a07b7b38826849899213f756d9123e1da5ce56f7eafeb0a8e091b78afca1de7fc663b8c97162b963cd4da0"}}}}}, {&(0x7f0000000200)={'KERNEL\x00'}}}}, 0x1f}) 02:52:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:55 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x7848a7810deca8f7}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x80, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4801}, 0x20000004) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400108001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x300, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000140)=""/229) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)=0x18ba) [ 263.894027] overlayfs: failed to resolve './file0': -2 [ 263.908549] audit: type=1804 audit(1603162375.932:206): pid=12913 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/139/bus/file0" dev="sda1" ino=15808 res=1 02:52:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x7ff, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.044435] FAT-fs (loop1): unable to read boot sector (logical sector size = 4096) 02:52:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 264.067656] audit: type=1804 audit(1603162376.092:207): pid=12931 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/140/bus/file0" dev="sda1" ino=16381 res=1 02:52:56 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x50, 0x6, 0x6a, @loopback, @mcast1, 0x0, 0x7800, 0x1, 0x5}}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = socket(0x2a, 0x80000, 0x1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140)=0x3f, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x10002) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) readahead(r2, 0x5, 0x6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x210000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000340)=0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @broadcast}, &(0x7f00000001c0)=0xc) 02:52:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.162484] FAT-fs (loop1): unable to read boot sector (logical sector size = 4096) 02:52:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r1, &(0x7f0000000300)=""/89, 0x59) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80001, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf25010000001c00078008000100", @ANYRES32=r1, @ANYBLOB="65c3c32c0f79191343670cbf62822a93b67fa8292233525e3f94b8da9dd78a1c19db01388dbdb73f2e274ae203b3c353507ddf7b837ca51af29f8e9698d43244199660465412508ad65b62a51240af45d8b061cc612350", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200ed050000000000000c0006000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc800) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000180)=""/87}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f00000002c0)={0x0, &(0x7f0000000080)=""/239}) r8 = fcntl$dupfd(r3, 0x0, r2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0xd811) [ 264.226831] audit: type=1804 audit(1603162376.252:208): pid=12947 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/141/bus/file0" dev="sda1" ino=16380 res=1 02:52:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10041, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb20e, 0x7}, 0x2, 0x0, 0x7, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x40, 0x0, 0x3}}}, 0x18) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) tkill(0x0, 0x22) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x8003, 0x8020001) open(0x0, 0x141042, 0x8) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x11d) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) 02:52:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x81}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x18, 0x50, r0, 0xd4b31000) 02:52:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.373314] audit: type=1804 audit(1603162376.392:209): pid=12968 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/142/bus/file0" dev="sda1" ino=16362 res=1 02:52:56 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x83, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x1e, 0x1f, 0xffff, 0x40, @empty, @mcast2, 0x7880, 0x8, 0xfffff138, 0x1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r10, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001500)={&(0x7f0000000080), 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb48, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0xaf8, 0x8, 0x0, 0x1, [{0x440, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000000)={0x3, r6}) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/34) prctl$PR_MCE_KILL_GET(0x22) read(r8, &(0x7f0000000380)=""/233, 0xffbe) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x20, 0x97, 0x9, 0x0, 0x0, 0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3f, 0x3}, 0xa008, 0x5, 0x0, 0x3, 0x5, 0x397, 0xfff9}, 0x0, 0x10, r4, 0x8) sendfile(r0, r3, 0x0, 0xd816) 02:52:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1, 0x21c001) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x1, 0x0, 0x0) msgrcv(r2, 0x0, 0xffffff64, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/15) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) timer_create(0x0, &(0x7f0000000140)={0x0, 0x41, 0x1, @thr={&(0x7f00000000c0)="5651cc64c7e8785de5fe78a1a49e654cdfdddb2456b200035a", &(0x7f0000000480)="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"}}, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0x1, 0xffff}) ioctl$TIOCNOTTY(r3, 0x5422) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r5, 0x0) syz_mount_image$sysv(&(0x7f00000001c0)='sysv\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x4, &(0x7f0000000300)=[{&(0x7f0000001480)="89bd5f085c205b5246f37bd5b6969cba32218057a19f26f8db3ab706703d480c255581097f9205b53fb58cf1efc57f1a50a918f365827e99d5ae9d802af0a39a9531b5dc77dedacc4be248c61bcc5b621fdabbdf444a9845b9de8ef7192829e5d4a58dc4eb9c98221ebcd91d9ab0e5d9d711e602ad49b01cb827d8c292a2f4186a6e2f4c015dfc561ce28b0092414d4b8a662aadd751210fe9ca74823b8f9093909a3f735e5c93c47306d3b4cd1d07f6edec1b05cc461bedfef0d0062343393344a4237d67b457db3117a0b9c502fef0d6908cf0adfe7bc452feb0ca5423c86ab341b5703d32a8eac49de6d3395ad6adc5c8b2dd96", 0xf5, 0x9}, {&(0x7f0000001580)="3c173b2bcbd5e18c6705563fb9a87da95958dac57f0511aea4c2d06a1e1756371e144f51bd548bee68e37da030cf437fe950209b259fcb711c88a4e7f4a95b152b2b6c2b6003f8380ade0325824ad0a95ceb51fbfa57f8c8a259c659ee54fddbdd846a576b1ab870a85e830c7f83805f08a7e5dca0faf7e29c1a4b2b0bc3d5c785f6fb69c5f55c83c74fbb82c9a794e22ffc0f3a4deba517ae5d74b2f10aa50c8ecc965ab5c16b46a2073ecb8a3e4d1a5e2b73b6bed2bfe063200ad1e264804d342e5ab52f0beed58ece0963fab74fd5976c0a0d779e2eaf38", 0xd9, 0x7}, {&(0x7f0000000240)="b85a9676db8cc6b5f444e25c", 0xc, 0x3f}, {&(0x7f0000001680)="d1c2755be20044d706f7ad7a81a9aec25304bc0713a8ab25a1b56eb39d585959e54b88bbeabc1569f200aa61efd9feebc3aaa7224b26494b7dd7b6ef2f618f9c7ac4ea52e2f3cf624f7208288c8b295530edc5929c15c247a99351d18b90fa4ec91b39e13dbaeeddef26e28f93e0dab8596054e8fdac0d4c6929b4727a3f9c78ec725a10cf575e473689f19d50b40b3122047675a2d08ae198b4c48d05114c13dee9c20545e890306628bfd3d397", 0xae}], 0x200000, &(0x7f0000001740)={[{'mountinfo\x00'}, {'/dev/rtc#\x00'}], [{@appraise='appraise'}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r5}}, {@obj_type={'obj_type', 0x3d, '/dev/rtc#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 02:52:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) mq_getsetattr(r4, &(0x7f0000000040)={0x7ff, 0x8, 0x9, 0x7f}, 0x0) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000480)={{r2}, 0x0, 0x6, @unused=[0x6, 0x6, 0x1, 0x858a], @subvolid=0x9}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)={0x1a8, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x180, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}]}, 0x1a8}}, 0x4) sendfile(r5, r6, 0x0, 0xd811) [ 264.935697] audit: type=1804 audit(1603162376.962:212): pid=13016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/145/bus/file0" dev="sda1" ino=16382 res=1 02:52:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030", @ANYRESDEC], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@multicast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000001c0)) creat(&(0x7f0000000380)='./file0\x00', 0x100) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x11300, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64, 0x10044, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 02:52:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 265.046313] VFS: unable to find oldfs superblock on device loop3 [ 265.108385] overlayfs: missing 'lowerdir' 02:52:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 265.131173] audit: type=1804 audit(1603162377.152:213): pid=13037 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/146/bus/file0" dev="sda1" ino=16383 res=1 02:52:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xe, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:52:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x1, 0xff}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='syscall\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/86) 02:52:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xc, 0xbfde, 0x8000}, &(0x7f00000001c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, r1}, 0x78) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x70, 0xf7, 0x0, 0x0, 0xd9, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x1800, 0x7fff, 0x3, 0x5, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2410, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x3, 0x3, 0x0, 0x8}, 0x0, 0xa, r3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) [ 265.279236] overlayfs: missing 'lowerdir' 02:52:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x1, 0x0, 0x8001}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 265.446401] overlayfs: missing 'lowerdir' 02:52:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x3}, 0x1c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x180001c, 0x40010, r0, 0x0) 02:52:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) open$dir(&(0x7f0000000080)='./file0\x00', 0x10000, 0x40) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1f, 0x12, r0, 0xfffff000) kexec_load(0x43eb, 0x3, &(0x7f0000001240)=[{&(0x7f0000000140)="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", 0x1000, 0x11, 0x57}, {&(0x7f0000001140)="74b4c6604dc05ccbe78ee5084f35c1bf7c1e84c04ff646ea87efb4ea5a6c3bff804ef97ee7dc7ba7e1aa2c80a879589274fea626fadaf45643accaf0e9ee23a8670c3d9b6db7dd874b468a1e559c", 0x4e, 0x73f, 0x1}, {&(0x7f00000011c0)="4a1932f0730555d38c125614a4d432a1a1119ac1d686c6210a379de0e9b484b29b23dff794439266d109e893b6869f5020e44fb6a8c64c49c5830c228547671f1aeb8076a6de73b27fae857dc66bc4fc6f3e421bca715fbbe53aeefb613f72b7edfe4771d69dd95a173e792da6978f399be9c6e54f313873a2609ac552", 0x7d, 0x7, 0x20}], 0x160000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0) mmap$usbmon(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x8) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000012c0)={0x0, 0xfffffffffffffffd, 0x68a2, 0x1}) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) [ 265.677819] overlayfs: missing 'lowerdir' 02:52:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000280)={0x8, 0x1, {0x40, @struct={0x7, 0xfffffffe}, 0x0, 0x3f, 0xff, 0x3, 0xe000000000000000, 0x9, 0x14, @usage=0x98de, 0x7fff, 0x800, [0x2, 0x5, 0xfff, 0x2, 0x9, 0x7f]}, {0x5, @usage=0x25, 0x0, 0x3, 0x8000, 0x1, 0x7f, 0x6, 0x420, @struct={0x200, 0x8001}, 0x7ef9, 0x594, [0x8000000, 0x7a70, 0x6, 0x8000, 0x6, 0x1]}, {0x2, @usage=0x1, 0x0, 0x8, 0x100000000, 0xb24c, 0xcec6800000000000, 0x8, 0x480, @usage=0x5471, 0x10001, 0x4, [0x7fffffff, 0xffff, 0x7, 0xfffffffffffffffd, 0x800, 0x9]}, {0x100000000, 0x4f0, 0x100000001}}) sendfile(r2, r3, 0x0, 0xd811) 02:52:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xc, 0xbfde, 0x8000}, &(0x7f00000001c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, r1}, 0x78) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x70, 0xf7, 0x0, 0x0, 0xd9, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x1800, 0x7fff, 0x3, 0x5, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2410, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x3, 0x3, 0x0, 0x8}, 0x0, 0xa, r3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 02:52:57 executing program 3: setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x42480, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x2) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000200)) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:52:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0x20004040) 02:52:57 executing program 2 (fault-call:10 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 265.889546] overlayfs: missing 'lowerdir' 02:52:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x1319, 0xa, 0x1, 0x8, 0x9, 0x5, 0x2}, &(0x7f0000000180)=0x20) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0xffffffff, 0x9, 0xffffffff, 0x9, 0xcc, 0x5}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x80) sendto$inet6(r2, &(0x7f0000000080)="5fc08031fdf9a6adde5dac5f5305109b879be137d6f549b44565df76ba8aed65fd2297e033aef1a768d51507f088655b9d45", 0x32, 0x8051, &(0x7f00000000c0)={0xa, 0x4e20, 0x10003, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffa}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r2, 0x0) [ 265.990738] FAULT_INJECTION: forcing a failure. [ 265.990738] name failslab, interval 1, probability 0, space 0, times 0 [ 266.056964] CPU: 1 PID: 13119 Comm: syz-executor.2 Not tainted 4.19.152-syzkaller #0 [ 266.064886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.074431] Call Trace: [ 266.077064] dump_stack+0x22c/0x33e [ 266.080713] should_fail.cold+0xa/0x2f [ 266.084615] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 266.089754] __should_failslab+0x153/0x1b6 [ 266.094207] should_failslab+0x5/0xf [ 266.097936] kmem_cache_alloc+0x2b1/0x4a0 [ 266.102104] __alloc_file+0x21/0x330 [ 266.105832] alloc_empty_file_noaccount+0x19/0x80 [ 266.110691] open_with_fake_path+0x27/0xe0 [ 266.115054] ovl_open_realfile+0x109/0x150 [ 266.119418] ovl_real_fdget_meta+0x1fa/0x510 [ 266.120891] overlayfs: missing 'lowerdir' [ 266.123845] ovl_read_iter+0x103/0x2c1 [ 266.123874] ? ovl_open+0x260/0x260 [ 266.123890] ? __fdget_pos+0xe3/0x100 [ 266.123908] __vfs_read+0x518/0x760 [ 266.123923] ? __se_sys_copy_file_range+0x410/0x410 [ 266.123942] ? avc_policy_seqno+0x9/0x70 [ 266.123955] ? selinux_file_permission+0xc1/0x5a0 [ 266.123973] ? security_file_permission+0x1c0/0x230 [ 266.123992] vfs_read+0x194/0x3c0 [ 266.124008] ksys_read+0x12b/0x2a0 [ 266.124023] ? kernel_write+0x110/0x110 [ 266.124037] ? trace_hardirqs_off_caller+0x6e/0x210 [ 266.124052] ? do_syscall_64+0x21/0x670 [ 266.124068] do_syscall_64+0xf9/0x670 [ 266.124086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.191826] RIP: 0033:0x45de59 [ 266.195006] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.217908] RSP: 002b:00007fa2b0101c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.225623] RAX: ffffffffffffffda RBX: 0000000000026500 RCX: 000000000045de59 [ 266.232893] RDX: 0000000000002020 RSI: 00000000200003c0 RDI: 0000000000000004 [ 266.241119] RBP: 00007fa2b0101ca0 R08: 0000000000000000 R09: 0000000000000000 [ 266.248372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 02:52:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 266.255627] R13: 00007ffe87f9794f R14: 00007fa2b01029c0 R15: 000000000118bf2c 02:52:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x3, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000000c0), 0x2) sendfile(r4, r5, 0x0, 0xd811) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x2, {0x1, 0x8000, 0x3f, 0x9}, {0x9, 0x0, 0x7ff, 0x5}, {0x2, 0x1}}) 02:52:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1a, 0x13012, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") [ 266.361972] overlayfs: missing 'lowerdir' 02:52:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030", @ANYRESDEC], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfsroot={'smackfsroot'}}], 0x6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x101040, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000300)={0x980000, 0x80, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x990a79, 0x5, [], @p_u8=&(0x7f0000000280)=0xc0}}) r4 = syz_mount_image$ubifs(0x0, 0x0, 0x1ff, 0x1, &(0x7f0000000680)=[{&(0x7f0000000580), 0x0, 0x2}], 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000440)=ANY=[], 0x9, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000380)={0x5, 0x2, 0x3, 0x40, 0x7fff, 0x1000, 0x8}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) umount2(&(0x7f0000000080)='./file0\x00', 0x0) dup2(r4, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000001c0)) 02:52:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x80000001, 0x0, 0x8, 0xa}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2002, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040)) 02:52:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = accept4(r2, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xa0, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 266.571913] overlayfs: missing 'lowerdir' [ 266.622994] pic_ioport_write: 46 callbacks suppressed [ 266.623000] kvm: pic: single mode not supported [ 266.623062] kvm: pic: single mode not supported [ 266.631858] Unknown ioctl -2147158772 [ 266.654640] Unknown ioctl -2147158772 [ 266.678211] kvm: pic: single mode not supported 02:52:58 executing program 2 (fault-call:10 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x7fffffff, 0x6, 0x101, 0xfffffff7}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) [ 266.678269] kvm: pic: single mode not supported [ 266.721913] kvm: pic: single mode not supported [ 266.728301] kvm: pic: single mode not supported [ 266.735515] kvm: pic: single mode not supported 02:52:58 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x6, [], &(0x7f0000000040)=0x80}) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xfffffffffffffff7) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r7, &(0x7f0000000380)=""/233, 0xffbe) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000100)={0x10000000}) fcntl$dupfd(r4, 0x0, r3) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r8, 0x0, 0xd811) 02:52:58 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='veth1_to_bond\x00') r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xd4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa4, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3f}, @TCA_NETEM_CORR={0x10, 0x1, {0xffffffff, 0xfffffe00, 0x10000}}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x20000, 0x25, 0x1000000, 0x9, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x401, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8001, 0x9f, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x3, 0x7fffffff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0xff, 0xffffffe0, 0x1fe, 0xfffd}}]}]}}}]}, 0xd4}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') [ 266.741648] kvm: pic: single mode not supported [ 266.767353] kvm: pic: single mode not supported 02:52:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 266.785636] kvm: pic: single mode not supported [ 266.828387] overlayfs: missing 'lowerdir' 02:52:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @default, @rose, @null, @netrom, @null, @remote, @bcast]}, &(0x7f0000000080)=0x48) 02:52:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x8, 0x1f, 0x5, 0x9}, 0x3a, [0x5, 0x81, 0x6, 0x8, 0x80, 0x2, 0x200, 0x80000000, 0x1, 0x1, 0xfffffffe, 0x7fff, 0x80000001, 0x5, 0xb71, 0x6, 0x5, 0xfffffffd, 0x4, 0xae, 0xffffffc1, 0x4c, 0x9, 0x9, 0xfffffffd, 0x3ff, 0x1, 0x2, 0x96d, 0xd3, 0x5, 0x2, 0xcfa, 0xff, 0x7ff, 0x6, 0xff, 0x716, 0x3, 0x8, 0x40f3, 0xffff8000, 0x9, 0x4, 0x6, 0x80000000, 0x1000, 0x7fff, 0x4, 0x1c, 0x4, 0x8, 0x80, 0x6, 0x7, 0xff, 0x1, 0x9, 0x1ff, 0x800, 0x800, 0x7fffffff, 0x7ff, 0xde], [0x5ccf, 0x7ff, 0x7, 0x9, 0x6, 0x4, 0x40, 0x3, 0x2, 0x29e, 0x2, 0x6, 0x3, 0x0, 0x9, 0xea, 0x5, 0x5, 0x3, 0x200, 0x200, 0xfffff801, 0x9, 0x3, 0x8000, 0xc6, 0x4, 0x6, 0x7ff, 0x6, 0x9, 0x4, 0x800, 0x8, 0x4, 0x8, 0x913, 0x778, 0x9, 0x81, 0x100, 0x4, 0x8, 0x4, 0x1, 0x5, 0x7fffffff, 0x1000, 0x55, 0x80000000, 0x5, 0x401, 0x4, 0x0, 0x81b1, 0x6, 0x5, 0x5, 0x922, 0x7, 0x1ff, 0x0, 0x5, 0xffff], [0x6, 0x0, 0x40000000, 0x8, 0x10000, 0x5706, 0x72e, 0x384956, 0xd6c5, 0x4, 0x5, 0x7ff, 0x1ff, 0xfffffff7, 0x7ff, 0x2, 0x2, 0xfa, 0x9, 0x6, 0xf226, 0xeba5, 0x1, 0x2, 0xffff, 0x7f, 0x2, 0x2, 0x7fff, 0xfffffff9, 0x5, 0x800, 0x7, 0x40, 0x9, 0xffff700c, 0x0, 0x6, 0x6, 0x1f, 0xffff, 0x7ff, 0x7, 0xf4, 0x5, 0x2, 0xbf, 0x0, 0x7, 0xb41, 0xfffffffc, 0x9, 0x100, 0x465c, 0x81, 0x5, 0x1, 0x7ff, 0x8c, 0xff, 0x10001, 0xffff, 0x0, 0x1], [0x0, 0xffff, 0x7, 0x3, 0x800, 0x0, 0x1, 0x0, 0x3, 0x80d, 0x9, 0xfffffffc, 0x1, 0x81, 0x3, 0x0, 0x3f, 0x1f0, 0x7, 0x3, 0x7, 0xaa, 0xffffffff, 0x3, 0xfffffffa, 0x0, 0x101, 0x8, 0x40, 0x2, 0x3d16b1da, 0x1, 0x51, 0x9, 0xd7e, 0xfffffff7, 0x5, 0x5025, 0x0, 0x3, 0x2, 0x8b31, 0x1, 0x6, 0x100, 0x4, 0x1f, 0x80000000, 0x6, 0x4, 0x9, 0xb6, 0x200, 0xfffff069, 0x7ff, 0x5026f2cc, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x1]}, 0x45c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x1) [ 267.000584] FAULT_INJECTION: forcing a failure. [ 267.000584] name failslab, interval 1, probability 0, space 0, times 0 02:52:59 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffbff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200800, 0x0) r2 = accept$phonet_pipe(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x30}}, 0x8008) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000440)=0x7fffffff) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000480)={0xba, 0x100000001}) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000004c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000540)) r4 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x1, 0x80000) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000005c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x20001, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x1, [0x468, 0x81, 0xf43, 0xde, 0x34], [0xac, 0x400, 0x4, 0x4, 0xb17, 0x5, 0x2, 0x3, 0xd3, 0x9533, 0x2e700a08, 0x100000001, 0x7, 0x2, 0x200, 0x400, 0x9, 0x7, 0x0, 0x80, 0x7fff, 0x1, 0x7390, 0x4, 0x8, 0xffff, 0x81, 0x7, 0x1f, 0x1, 0x6, 0x5, 0x101, 0x0, 0x9, 0x1, 0x5, 0x1, 0x9, 0x4, 0x3, 0x3, 0xf1, 0xffffffffffffffe1, 0x6, 0x7, 0x8, 0x8001, 0x180000, 0x8, 0x9, 0x20, 0xcb0f, 0x8, 0x7, 0x100, 0x76a, 0x2, 0x3, 0x9, 0x5, 0x9, 0x5, 0x4, 0x0, 0x7fffffff, 0xfffffffffffffff8, 0x401, 0x200, 0x0, 0x6, 0x6, 0xab4, 0xffff, 0x1000, 0x7, 0x4, 0x8, 0x9, 0x6, 0xf0, 0x5b4, 0x9, 0x1596, 0x2, 0x101, 0x48, 0x0, 0x4, 0x5, 0x7, 0x7, 0x9, 0x6, 0x4, 0x100000000, 0x25, 0xfff, 0x21d, 0x401, 0x9, 0x0, 0x1, 0x5f0, 0x1, 0x81, 0xffff, 0x7, 0x0, 0x4, 0x3f, 0x3, 0x400, 0x2, 0x9, 0x28, 0xffffffff, 0x1, 0xff, 0x7fff, 0x1000]}) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) write$binfmt_elf32(r5, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x6, 0x1, 0x28, 0x8, 0x2, 0x6, 0x8, 0x107, 0x38, 0x267, 0x0, 0x200, 0x20, 0x1, 0x2, 0x7, 0x8}, [{0x70000000, 0x1, 0x3, 0x1, 0x200, 0xffffb208, 0x2, 0x7}, {0x70000003, 0x8001, 0xfffffffb, 0x100, 0x4, 0x8, 0xffffffff, 0x482e}], "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", [[], [], [], [], [], [], []]}, 0x1778) 02:52:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 267.051673] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 267.063082] CPU: 0 PID: 13188 Comm: syz-executor.2 Not tainted 4.19.152-syzkaller #0 [ 267.071881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.081386] Call Trace: [ 267.083991] dump_stack+0x22c/0x33e [ 267.087636] should_fail.cold+0xa/0x2f [ 267.091538] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 267.096662] __should_failslab+0x153/0x1b6 [ 267.100918] should_failslab+0x5/0xf [ 267.104641] kmem_cache_alloc+0x2b1/0x4a0 [ 267.108815] selinux_file_alloc_security+0xe4/0x1c0 [ 267.113844] security_file_alloc+0x40/0x90 [ 267.118179] __alloc_file+0xc9/0x330 [ 267.121910] alloc_empty_file_noaccount+0x19/0x80 [ 267.126763] open_with_fake_path+0x27/0xe0 [ 267.131016] ovl_open_realfile+0x109/0x150 [ 267.135263] ovl_real_fdget_meta+0x1fa/0x510 [ 267.139689] ovl_read_iter+0x103/0x2c1 [ 267.143589] ? ovl_open+0x260/0x260 [ 267.147226] ? __fdget_pos+0xe3/0x100 02:52:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000000340)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000001c0)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000480)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000e9ff07", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_journal='data=journal'}]}) [ 267.151039] __vfs_read+0x518/0x760 [ 267.154687] ? __se_sys_copy_file_range+0x410/0x410 [ 267.159714] ? avc_policy_seqno+0x9/0x70 [ 267.163776] ? selinux_file_permission+0xc1/0x5a0 [ 267.168632] ? security_file_permission+0x1c0/0x230 [ 267.173662] vfs_read+0x194/0x3c0 [ 267.177126] ksys_read+0x12b/0x2a0 [ 267.180672] ? kernel_write+0x110/0x110 [ 267.184662] ? trace_hardirqs_off_caller+0x6e/0x210 [ 267.189683] ? do_syscall_64+0x21/0x670 [ 267.193665] do_syscall_64+0xf9/0x670 [ 267.198443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.203633] RIP: 0033:0x45de59 [ 267.206829] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.225747] RSP: 002b:00007fa2b0101c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.233550] RAX: ffffffffffffffda RBX: 0000000000026500 RCX: 000000000045de59 [ 267.241184] RDX: 0000000000002020 RSI: 00000000200003c0 RDI: 0000000000000004 [ 267.248470] RBP: 00007fa2b0101ca0 R08: 0000000000000000 R09: 0000000000000000 [ 267.255750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.262910] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.263024] R13: 00007ffe87f9794f R14: 00007fa2b01029c0 R15: 000000000118bf2c 02:52:59 executing program 2 (fault-call:10 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000040)={0x80, 0x1, 0x100000001, 0x7f, "d775b43f9c2ca217abd624f09d533d05bf47a7f5b6b50a64a34afe0a04b08a2f27487e15cef82e6d2011cc7004a9e815b96706d4aa1a47c234666e33c4d0ef8d31abc52b02d840fea9ba9dc067549c4b3dd5e723fd7c7f43459f7c0f6ed34cfa1bf7f77eb32067c4"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xd811) 02:52:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 267.311414] EXT4-fs (loop1): Mount option "data=journal" incompatible with ext2 02:52:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) splice(r0, &(0x7f0000000000)=0x2, r1, &(0x7f0000000080)=0x9, 0x8, 0xa) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r2, 0x0) [ 267.392330] EXT4-fs (loop1): Mount option "data=journal" incompatible with ext2 [ 267.421506] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:52:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1) close(r0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099007900000046000000"], 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1) bind(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x54e7547e02afa628, @local}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000000)=[0x5], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) write$FUSE_GETXATTR(r2, &(0x7f0000000700)={0x18, 0x0, 0x0, {0xa52}}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = syz_mount_image$qnx6(&(0x7f0000000040)='qnx6\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000880)="abb7311d7f000000000018a19f671eab8a9da3310000c686be3f315ac8ec8aa1b4b1dfa33a566978b1bfa21820be5393021898d1099f9d8a48a70e2ef013156664d992aff345f09713a48ae53a01d6678f61573e2d1cdabac638095acec9403fd39ce63dbb45a4587a21ab2c84b872dd9ca916110da9f275b29f71e353a0ec497f9588e72c0f3df12a8f89c5b3de89019edb43f3b7243bffba9b0d38ea64f5e22883", 0xa2, 0x2}, {&(0x7f0000000240)="f08b2d1404ec3a63725b8182e36652935027fdd60eae828263843601929f068fd66f66af7487f9a89837278c4c592940341fbb54f00746e5d061868227b0fd3e5f7bd2bcbebd7202b34c7a07c927e8fc1beea0cd151837e3248b46376b68cbd15321daf2df813c6d716fc723e92bc58f414d6e79c6346f37a532ac4d081f0a71e04a6973a29a8cd755df5073537a3e2a9a45cb71637aa4d12598bd4b418e13aec9a0ec198d7db18a03f626ccb8cd1ffcdb6207ba04cdb6233d51822f3d460d00"/207, 0xcf}], 0x4000, &(0x7f0000000780)={[{'\x17.\x1e'}, {'))#'}, {'nI\xe7\xb7'}, {'$-\xe1C\xf2\xf5U+|l\xed\x017-\xb0\xa9\xdf\xf4\aw\x9e\xb89}t\xd3\x94\xff\x8dm\xc7y\x04\xcf\b\xb7\xd6\x19\xb7u^\x8b\xd0\x1c\xce\x9bK\xdaH2-\x89\xe5X\xff\x9fH\xb2eip>\xd7\xe9Ja96\xff\x16\x9b#\xee\vf\x85q\x8b\xe9R\xd1\xf8P\xe30I{\xfb\x9f\x02F\xa2\xfcq\xa7\xd8\xbc\xfb+\xfcW\xdc\x7f9|T\xf8\x9a\xe4\xce~\x86\x9b\xf0\x81\x8fm\x93\xa1oI/\xf2\xca\xf6\rK7\xce\x8d\xb1\'\x93\x1avP\x8d'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '%\'].+\x01\x00\x01(!'}}, {@smackfsroot={'smackfsroot'}}, {@fowner_lt={'fowner<'}}]}) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000006800100025bd7000ffdbdf25000004000a0000ddc01e9e880917008010000100000000000000000000000000080001000100000008000500", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x48014) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000740)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz0', "4937dbe3d5ef88f828e2807964666e85564a111830a0e654f5afd9e34f50fcc216e1af8f2012ff0c9ec8e3cd59847bbc3224d9879ef140701a6553ca468a71bd22c57e5e0d8af04fcc208dccaeac31d11b5dce"}, 0x57) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffdc, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000002700000008000300", @ANYRES32=r6, @ANYBLOB="0a7e219a5550505050500000060036000000000077aecd2a08c06ebc68861fc5d32baf12c1071fada0c1d436f8cc6d36f758c8d30fc647079360888638cab896faea534781bdc1c04bb4c6d5e082db4303209a148f11feba3cf24ca9616f25df5a4de45f24d30892c704df3033c3b9f9ae6c6a84561c3fb3f5b87a266f441d1100"/141], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "321f89a5c278d4975dc419525923e6b5"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) [ 267.476122] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:52:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:59 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x6, 0x18000800, 0xffff, 0x3ff}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000000)=""/76) 02:52:59 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:52:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sysinfo(&(0x7f0000000280)=""/4096) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 267.647996] qnx6: invalid mount options. [ 267.702116] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:52:59 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8c000, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) [ 267.745515] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.763012] qnx6: invalid mount options. 02:52:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:52:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="201afe", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f0000004500)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006540)={0x2020}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f00000000c0)={0x18, 0x0, r7, {0x7}}, 0x18) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, r7, {0x3f}}, 0x18) 02:52:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5308b86acacf206c874f201000b0009000000030000000c0000000900000001000000010000001d5d00000040000000000000180000001f528026af4fdcb68d4fab09033e66e9a1406049e02c7b318aa7361f4bb9422b9c43c601beb571ccf40aa5062864ca08f225d7db882c382973487e30de721929d4d9e9d7d9943b640700000000000000b98cdc75b8f26712b8eb09b7961fbaafbf40f5f6ae84febf56f0c5596651d3def597039900d22d34ea7f21cfa39b3a27346375a5a7fa87", 0xc0, 0x400}, {&(0x7f0000000880)='\x00\x00', 0x2, 0xa7e}], 0x40000, &(0x7f0000014b00)) 02:52:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='logfs\x00', 0x184001, &(0x7f0000000180)='cpuset.effective_cpus\x00') [ 267.935343] overlayfs: unrecognized mount option "upper" or missing value 02:53:00 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x14) 02:53:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000100)) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x420, 0x3f3, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x36, [0xc3a1, 0x7, 0xb1e, 0xf7c, 0xffffffe0, 0x3, 0x0, 0x3, 0x7fffffff, 0xacb, 0x9, 0x20, 0x8, 0x1, 0xe2b, 0x8, 0x400, 0x8, 0xfffffffd, 0x1ff, 0x1, 0x0, 0x5, 0x5, 0x6, 0x6, 0x4, 0x1ff, 0x0, 0x7, 0x3, 0x400000, 0x3, 0x80, 0x1, 0x5, 0x2901, 0xffffffff, 0xc8f, 0x3, 0x1, 0x30, 0x1, 0xfffffff8, 0x2, 0x4, 0x0, 0x6, 0x282, 0x6, 0x8, 0x6, 0x5, 0x400, 0x0, 0x80000001, 0x80000000, 0x6, 0x5, 0x8, 0x1, 0x0, 0x40000000, 0x10001], [0x9, 0x6, 0x9, 0x2, 0x6, 0x2, 0x7, 0xa5, 0xfffff5cf, 0xfffffffc, 0x0, 0x4, 0x3, 0x8, 0x6, 0x40, 0x101, 0xb, 0x5, 0x1, 0x20, 0x0, 0x400, 0xff8, 0x6, 0xa, 0x7ff, 0x1, 0x38, 0xffff, 0xc5f8, 0x8, 0xb614, 0xffffffff, 0x8, 0x8, 0x5, 0x1000, 0x0, 0x10001, 0x8, 0x5, 0x2000, 0x400, 0x2f1e, 0x55b7, 0x9, 0x6, 0x1, 0x0, 0x7, 0x1d1, 0x5, 0x4, 0xffff, 0x100, 0x7ffffffe, 0x2941, 0x1, 0x7, 0x7fffffff, 0x3, 0x7ff, 0x6000000], [0xba, 0xd32, 0x6, 0x0, 0x7ff, 0x7fff, 0x5, 0x7fffffff, 0x3, 0x8, 0xfffff263, 0xf552, 0x1ff, 0x2, 0x0, 0x100, 0x9, 0xffffff09, 0x6, 0xffff, 0x697, 0x1ff, 0x8, 0x5, 0x100, 0x3, 0x7, 0x7, 0x0, 0x8, 0x0, 0xfffffffa, 0x7, 0x0, 0x10000, 0xffff, 0x7, 0x200, 0xc21d, 0x6, 0x6, 0x7, 0x8, 0x4ff, 0x90, 0x8, 0x461, 0x5, 0x757cc919, 0x3, 0x200, 0x1, 0x60d7, 0x800, 0x8, 0x100, 0x8, 0x196, 0x17, 0x9, 0x6445, 0x7, 0x1f, 0x8], [0x1183, 0x4d4b, 0x6, 0x61, 0x6, 0x7, 0x10000, 0x3, 0x8, 0x8001, 0x81, 0x8, 0xffffff01, 0xffff0201, 0x71a, 0xe2, 0xcccd, 0x42, 0xf95, 0x9, 0x6, 0x8, 0x20, 0x0, 0x2, 0x4, 0x3, 0x1, 0x1, 0x81, 0x40, 0x474f2ae7, 0x6, 0x7fff, 0x1ff, 0x0, 0x4, 0x4025, 0x8, 0xfffffffb, 0x0, 0x4, 0x1, 0x1, 0x8, 0x0, 0x2, 0x7, 0xfffffff8, 0x443, 0x8, 0x8, 0x6, 0x7fff, 0x8d, 0x3, 0x10000, 0x7f, 0x6, 0x3, 0x8, 0x6, 0x69dc, 0x6]}, ["", "", "", "", "", "", ""]}, 0x420}}, 0x1) 02:53:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4}, 0x1c) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000780)=0x4) mount(0x0, 0x0, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a43070e45f0d6f16df721eb766c195ca65efca1620ea70ae77c93a52354fbfe0fbdcbb5ae5b40c2e37044f08076065a8900a1679e7ccd56e484d18525602ed045ea34f2b43000000000000080baa3385c9cf8f212eef8e7448", @ANYRES16=r2, @ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40014) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000400}, 0x4004090) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r5, 0x0) syz_mount_image$hpfs(&(0x7f00000004c0)='hpfs\x00', &(0x7f0000000500)='./file0\x00', 0x27, 0x3, &(0x7f0000000700)=[{&(0x7f0000000540)="63f4a8a3932e06fdf9f3d743b74c9d85f7f3bf0e5cff6a8bd1d212c15fbe95876c373780e25ffa6b7c3728", 0x2b, 0x4ce}, {&(0x7f0000000580)="a65fd10e1131e755437bb1134c39a6c5760d868b16d5db86175af19a71080c9d388c8d9fe1a03016cbb80044c46f9f22e739500f6624172bada2b313da30c198b91c5d98816945cfdeecca467c6ea62864b2e2927b126fa9d2c62bf3e6f4cc8cde755f97c0ca1dcb980e82b6b6ee0af7ca8cd6e27b062d6f2eec2bd37ee4da5d576a3b6eafee51af47ceafcbaa83c95945dc95ea71a236e716be030806650174fd93d98e513303bc59184b423cb1a97064c076746adb11184b335922f89ce8343106057971fea68720e63369b09983", 0xcf, 0xac4}, {&(0x7f0000000680)="39deb390f10b5b42d6469c09b1396b92d430fa9bc81646bba5fd129828a08b6628232f611ccc05f91a2b069dacd15b7eded6e43dff11c0d52ea29e6329e6daf6d7655f366e853b06b95f8d23b8596de5", 0x50, 0x4}], 0x20, &(0x7f0000000980)={[{'IPVS\x00'}, {'%{'}, {' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {'sit\x00'}, {'+-+!'}, {'sit\x00'}, {'IPVS\x00'}, {')![\xaa%#.^)::'}], [{@hash='hash'}, {@hash='hash'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x62, 0x62, 0x66, 0x63, 0x30, 0x35], 0x2d, [0x33, 0x38, 0x31, 0x62], 0x2d, [0x63, 0x36, 0x34, 0x37], 0x2d, [0x65, 0x32, 0x30, 0x31], 0x2d, [0x32, 0x35, 0x54, 0xb, 0x30, 0x66, 0x36, 0x36]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',%!\x10&\\\"'}}, {@smackfsroot={'smackfsroot'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise='appraise'}, {@uid_lt={'uid<', r5}}, {@appraise='appraise'}]}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)={0x10d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x863, 0x6d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0xa2, 0xfa, "7af1492772c79d1e71b6fdf0e7fe75142bf35d35c77377ff30dad42a45b57f53190bb4ed52ca5eeb0702ba7e2f783349c6d285d625a565bca399b587dfc2e73f8a956c87778dd5677ddef7511c953a659ea964beca8cdeec8a09265ffac77a8ec1e038d9ace75d20f912b5af2724f98004029f8a19c28abe1aa8b01f6dc9a00afcf585be5158373ad3075b91e7e86cae6d853966b6a10b867f1532e50411"}], @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000082) pipe(&(0x7f00000001c0)) [ 268.151066] overlayfs: unrecognized mount option "upper" or missing value 02:53:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 268.249056] overlayfs: './file0' not a directory 02:53:00 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x1400) 02:53:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f00000001c0)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x51080834c6b6ff14}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xe2800, 0x0) read(r2, &(0x7f0000000480)=""/141, 0x77) [ 268.356806] overlayfs: unrecognized mount option "upper" or missing value [ 268.381713] kauditd_printk_skb: 18 callbacks suppressed 02:53:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 268.381725] audit: type=1804 audit(1603162380.403:232): pid=13331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/160/bus/file0" dev="sda1" ino=15861 res=1 02:53:00 executing program 3: ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x4000010, r0, 0x0) [ 268.552456] overlayfs: workdir and upperdir must be separate subtrees 02:53:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0xfff, 0x1e9, 0x1, 0x8001, 0x100, 0x401, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x81, 0x0) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000200)=0xffff8000, 0x4) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000100)=""/90) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f0000ff4000/0x4000)=nil, 0x3) write$uinput_user_dev(r1, &(0x7f0000000480)={'syz1\x00', {0x7, 0x400, 0x2, 0x9}, 0x7, [0x2, 0x7, 0x8001, 0x6, 0x7, 0x5, 0x0, 0x80000000, 0x3, 0x0, 0x81, 0x7f, 0x80, 0x7fffffff, 0x1, 0x5, 0xff, 0x8, 0x6, 0x7ff, 0x6, 0x3, 0xfff, 0x692, 0x2, 0x80000001, 0x100, 0x1a41, 0x4, 0x1410, 0x5, 0x4, 0x5, 0x4, 0x5e2, 0x1000, 0x7f, 0x9, 0xc80, 0x20, 0x10000, 0x8, 0x5be, 0xfa, 0x3, 0x80000001, 0x80, 0xfffffff8, 0xfffffe01, 0x8, 0x6, 0x4, 0x1, 0x5, 0x6, 0x5, 0xfffffe00, 0x454794e8, 0x5, 0x5, 0x5, 0x6, 0x2, 0x137d20a8], [0x3ff, 0x9ba7, 0x9, 0x5, 0x8, 0x9, 0x1000, 0x2, 0x8, 0x20, 0x80000001, 0x3, 0x3, 0x0, 0x5, 0x80000001, 0x5, 0x8, 0x50, 0x400, 0x0, 0x3, 0x1, 0x0, 0x40, 0x3, 0x800, 0x4e, 0xfff, 0x7, 0x10000, 0xfffffe00, 0xfffffff8, 0xffffffff, 0x1000, 0x3ff, 0x401, 0x3f, 0x523a, 0x1, 0x0, 0x2, 0x2, 0x3, 0xdbca, 0x0, 0x8, 0xfffffff8, 0x1c0, 0x8, 0x1, 0x1ff, 0x1, 0x1, 0x7, 0x8, 0x4, 0x7fff, 0x9, 0x7, 0x3ff, 0x1, 0xfffffffe, 0x4], [0xff, 0x43f1, 0x1, 0x9, 0x1, 0x4, 0x1, 0x1000, 0x4, 0x0, 0x20, 0x9, 0x0, 0x0, 0x5, 0x9, 0x8, 0xfa, 0x3, 0x3, 0x6, 0xffffffff, 0xc7, 0x80000001, 0x4b, 0x2, 0x2, 0x7, 0x81, 0x9, 0x0, 0x2, 0x4, 0xffffff00, 0x8001, 0x1ff, 0x40, 0x10000, 0x4, 0xfff, 0x6, 0x200, 0x6, 0xffff, 0x7, 0x9, 0x2, 0x1, 0x3, 0x7, 0x3, 0x8, 0x40, 0x2000000, 0x100, 0x200, 0xb08, 0x939f, 0x4, 0x5, 0x1, 0x0, 0xc701, 0x80000000], [0x800, 0x5, 0x8, 0x1, 0x3, 0x100, 0x80000001, 0x6, 0x8, 0x0, 0x6ddc, 0xfffff800, 0x7, 0x6, 0x7ff, 0xd45, 0x2, 0x7, 0x10000, 0x7, 0x10000, 0x12, 0x6, 0x4, 0x800, 0x401, 0x7, 0x5, 0x8, 0x7, 0x6, 0xfffffffb, 0xfffffffe, 0x0, 0x100, 0x6, 0x9, 0x0, 0x7, 0xfffffffb, 0xffff, 0x101, 0x7, 0x5, 0x100, 0x5, 0xffffffff, 0x3, 0x1f, 0xa0, 0xffff, 0x5, 0x7fff, 0x9, 0x5c8197a4, 0x0, 0x400, 0x6, 0x2, 0x9, 0x6, 0x6, 0x6, 0x9]}, 0x45c) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x1, 0x4]) [ 268.593814] audit: type=1804 audit(1603162380.623:233): pid=13343 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/161/bus/file0" dev="sda1" ino=16391 res=1 02:53:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 268.626087] audit: type=1804 audit(1603162380.623:234): pid=13342 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/117/bus/file0" dev="overlay" ino=16359 res=1 [ 268.663631] audit: type=1804 audit(1603162380.653:235): pid=13347 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/117/bus/file0" dev="overlay" ino=16359 res=1 02:53:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:00 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x200023e0) 02:53:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000780)=0x4) mount(0x0, 0x0, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a43070e45f0d6f16df721eb766c195ca65efca1620ea70ae77c93a52354fbfe0fbdcbb5ae5b40c2e37044f08076065a8900a1679e7ccd56e484d18525602ed045ea34f2b43000000000000080baa3385c9cf8f212eef8e7448", @ANYRES16=r2, @ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40014) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032bbd7000fcdbdf250008000600ff010000080004000500000008000400f7ffffff0800060006000000300003ff0100000000000000140006e220010900000000000000000000000002060007004e200000080003000300000008000500010000000800040005ec9ce4e1101fd41af3000000d22cb18b512aaf6598c9b8edfb570b1608f4dd4235327eb4f504de90948ea7a23cd2e9e61306c00ad2e76ddf8eff12966668d0c27487f7dd60b6051d16371cd40d4383399a9addc139aea35e61822faaf725a8a614fbbadf039a796c2e2e5838d47f0fa755c5947c8c09000000b7fe7f897bd6111faed4a1479e38219732845a61e6604b7274743e18c189a25129380ec9ef4d5fa6cf348d2969899a801712a1ac03c10fa955cad0400d9eb9e1177ab87ddca4ee6d3f3c482f3decbd2b97ee72be2090b818a8664e7ae2503587a593859e85803f8ff691e2a0cb7bca38d920d0939c7bb0a7104eea98b220e6ec44e2389f97259fed"], 0x7c}, 0x1, 0x0, 0x0, 0x4000400}, 0x4004090) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r5, 0x0) syz_mount_image$hpfs(&(0x7f00000004c0)='hpfs\x00', &(0x7f0000000500)='./file0\x00', 0x27, 0x3, &(0x7f0000000700)=[{&(0x7f0000000540)="63f4a8a3932e06fdf9f3d743b74c9d85f7f3bf0e5cff6a8bd1d212c15fbe95876c373780e25ffa6b7c3728", 0x2b, 0x4ce}, {&(0x7f0000000580)="a65fd10e1131e755437bb1134c39a6c5760d868b16d5db86175af19a71080c9d388c8d9fe1a03016cbb80044c46f9f22e739500f6624172bada2b313da30c198b91c5d98816945cfdeecca467c6ea62864b2e2927b126fa9d2c62bf3e6f4cc8cde755f97c0ca1dcb980e82b6b6ee0af7ca8cd6e27b062d6f2eec2bd37ee4da5d576a3b6eafee51af47ceafcbaa83c95945dc95ea71a236e716be030806650174fd93d98e513303bc59184b423cb1a97064c076746adb11184b335922f89ce8343106057971fea68720e63369b09983", 0xcf, 0xac4}, {&(0x7f0000000680)="39deb390f10b5b42d6469c09b1396b92d430fa9bc81646bba5fd129828a08b6628232f611ccc05f91a2b069dacd15b7eded6e43dff11c0d52ea29e6329e6daf6d7655f366e853b06b95f8d23b8596de5", 0x50, 0x4}], 0x20, &(0x7f0000000980)={[{'IPVS\x00'}, {'%{'}, {' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {'sit\x00'}, {'+-+!'}, {'sit\x00'}, {'IPVS\x00'}, {')![\xaa%#.^)::'}], [{@hash='hash'}, {@hash='hash'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x62, 0x62, 0x66, 0x63, 0x30, 0x35], 0x2d, [0x33, 0x38, 0x31, 0x62], 0x2d, [0x63, 0x36, 0x34, 0x37], 0x2d, [0x65, 0x32, 0x30, 0x31], 0x2d, [0x32, 0x35, 0x54, 0xb, 0x30, 0x66, 0x36, 0x36]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',%!\x10&\\\"'}}, {@smackfsroot={'smackfsroot'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise='appraise'}, {@uid_lt={'uid<', r5}}, {@appraise='appraise'}]}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)={0x10d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x863, 0x6d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "2d8ca92ef271757cb760d4995dbcc05b2cde800a8ca260b47f9d3c3e89b6f498ed21aef08a0b01ca656c467eccec9b72168c948f32c3560c7f53d82aaca1a8fed56c533006f5119e84c05da39365d10c9ecd284620228b9b5284e0b4f0659bb63af42cefd95e8f0daa2c1c8e39dde697de9475775549a8d23cb83d127fc181263abb888356f896d01bd60a330b645b581b65e65483cca5d1c3e82d4862b7e2590dbe81b99ebf2e2077d9c69945364f953061f2d4b091ec83c8e5ce634c6f30c2312fdcae27c838f232daf0a3a1c72fe1f31f64f0a746b32b6bbee0212f82056282ba1ca738bf2256fe6fb164560a39debe99a536ce4b432fb80669c5c22e05bab12a22c9829e084cf81eefc341277124321d80e4e9d29feb78feacb599e22573711cbf4cd29469b4d11fa402a4b18d542218662c8fe5493a4ae01e3eadfc8a483a73d9dbef4de34e05e549694765350eb9d84a5ad714035a282b2cf82a30099955350607d02ac052c216088a0870c9d03a376a75bd6c8b350a0beec08c54a4eaf62137fe35fe216024e6b9d804d88acddcb9354347959e6aad134a3d528d1d20e1b63e48a715537e4deab44aabb3eedf00102699e130c7fe6a31603a6d19559108b1a3049fa8ef97324e5470da0eb6833a6dca0ef2cbd3b181039bb38f8a44416905080275a961039b64214fa46bffcecfc126f9b8f8ef564a531757f4c4292caa61caa2db952ff3e5c1cb452c743492987ac7eb244ca95d264f3e1e09a48b373bece5cc1e2f6d7af9b45a1224cc760f1192407cad57349c9a3261bce98f7a8dda7eab1112122cea912332fb8de4354d8d559189ca366890ad5b0f50251ce7639a63073dcc4d91babbfdc589b4eb8b3578d63f93a930de3feffe549141fc08b6f1e927f581bf36f0a15189bbad27c7ba778ab06ac18c0aa0b4fc10667aadd7603a30ea3b385833222a0ab7dea22499bcee0afc5e6b32b1a5032e9ea5b0476928d42c0000f7703e712a87bf991754b133267e28f94d487a2c507061d4315b34f13ec3f12007899bee878b37a618ebe25fa74f598bcf1a7b25ebc8ac840786c40c8c507bc4b9e718663010ec5d8e44595a8e9c367a34c718f8d9b32418b45c3765c17528efb45c3fdb3717f3dfe639867f569fdc8c13d15ad938d9d68a942a2ef9c92d39783ccfad330b4b97b7c7226e38267fb4795c5541e5f0fae9f429939ee777af1e1328d38261ae9d1f507896401a801b47f10f6b3809b967b25f6cda5ffc523722112713e4b05f9401f943ce502bcf5716b6dacaf981d1c08f37b7376f022e5066a0b7a5db1086fd6657ccb0bb9139858ac2503bb35c4e5702e10eacbdeff1f412cd892b8473bb0bb8a6157917a45f3fa2be6c83a5497c19484ceebc3fa7555d7c5df86fa99e13094966acbc2911ab730638b5a6f44902d2c98934360cc415e59801a12299c90fa0135837f666c51db3ea5cf580e58397904b5a76e4d5620b32a1d622245f4b462e24fe266bdf71d38b831aba870dc0dfd2ca83692a7bef845ea2523674d4f63e59297af594f8fdbaef27f2712b26f88623a38c7bf14e189af022900f8c4926a6bc3f15695d2637613f9a4260d130a8b1ecbb29f504cd7b0765e766207de532be147ad72be3e9708e92b4d0685bb07ee3c050ea88be5c2aa97a6928c907b58ba503bb1d1bed84fc57bfda30d62035896b964e8b74b41356f441c2570fe1f66f5913e0b7cc99e135c53187bcfd676b7472109dfaa21e30098d8734237ea374479a06d4f574b577b63206c83eea020f5d9b2470c313841d634196af3f90e9c91f54b9b06cadcdf2facf1244033352c89cf7ad45c3a0a11e3bf11eb3e2cd34f2100b572962ae2818fce0332bee1e9d50afbba802555a5a5d1e35c4ac8ba45675944c1679e36e4c89223fdeea726db19abfbfebdd3001baa1854e36b4e0d98a915708738031d0d54bddb4d06b5657278423dacbd4f472a0c2e7ac892e4e9e9fad68bfa5cba1627c83241be4f2fa377b571e0b949e0f0259dcb29ec80bf0a0168ebcca7a78180df6f682aa5df4c57e0aeca6858ef8e5b0b9d4fcac75d302045882e3268be7c722b4cf94713c32d1c248eaafd70c724d912b95346ce842afcfe218ca087409e1c8f349ff60a33e0fee772445072a3d8b2ce4b7a50798a680e3c513965a017c3d74cf1556e8cc58ff7b43451776569bbe186bbde4efe1dfcd2fb8c684a8b0545a3db7457e7a94dd2065727d6f2953a4181feed06d5a5d91245dc83c64b9040eaf12836c09913cfc6132999f786615a0ad197b119f08d8df8b95067baa60d2431526687fbe383893a961bf0d29e753cdf715a637570f55a68e7ab673cb51fecafb5f5112967330a4e9d6ac608c3a8a2835cbde6c0883bd36286f0b719678340f94a3fb5797a2c5ba7c1bc70e15df6d07f3095b0e9172cced0352c8319262c4a46143d7f0353b47b834d4350133d0e1b4ddcbf02fd6f959a2534fa77aa9c451e49e307b9c24c621b8ab0a8061fb8a595e929f241ef27acacc0716a402c948c3475878b1e10f64e1c97da0194e7e2ca98df0f287250a98aa2368e071b29f2b570e6757faa08315779edd359a2c389446aaf7796dc0d306aeb85bc3d9ba1875fd4819ce96a40274229b7b276d25d7882ac822332fe7ae9f417b8c4afbb8f33217814e7b0c75e0b24cdb13de5da37258a596e3b645a371ddec1a60dd53cf188111b67c202da3188a3b44c52bcb662e7454542456bd6f475a20bb49404b40aca2b46e96825500abe76d2fa4da0acb30815565104f4480a6cd56a69306ad1e1788609ed8c85539c362de23452bd7eb0c5e37b8160106bf9dbe6a9656d4819dc1d89b8317594f144bbbec54d9cfa6c6853e6360e6f80d2d3aecd11159c2993c2b7602726c8996a7c8506e904a12024a885841a8f8124dae8d8438e4cdd522fd740a1370b0a4c11c9746ca7ce5b0cb2189ab9ea4a093ed2e0d6c58266dc04d6435ad9e2773eac26d217644bda6d3e71fc243b28975fd863bac9a1aa27f413a0380d904673cf24986cf7af740f7d090132e4acdd59ab939f065c2911a0acba4e14b23ac00d49bfbc31d05ba0c80d35bc2f96c2529d66af09bfd751c5fa28d67301f33830366a8c2c601845681ede2dfc4a7c24261871193f50983c7f8c5aa55b42b03c56b8b78ce03b8df6100085213d6056b5558b47f00ac4819086c9efc9ea33d0a28321868149c32cd63546c02340ed74c00d14ff5c5589808f215c4e5403d3eba4df803e14fa4cf00a64e2c20d1ae1c987df67bc897271a953e71e2124495ad4cfca2eccf0282ead53c6cb802d756cd56bef03ba0d49815f0e91ecc8d2b74e5db903cd51b2f12f52e250331ed2148ef8f0b30c69808b4e7eb424cd34bd6b168858a0a0226de95a08e639742988fb8302967f459c418541e7a9e602068832f3e8659352d9459bc05dc606f4fa5f8dd7691cea479425ccfcaccbe15cf5a8d7437f6b53ff86c0ff20f1f1198860fb33fb849fba637968f70664300e3cce99ad3f6be4490dd938774a7555fdad6224ec80dd09aa921d11c3fe1a4fac1de5b222c571722d178e1221837835dce986a62cc17915e4d88d6d85cf65289ac94b843e1b08cba9753a5f6713f053896efceb071be941f5e474862f67226a73954d93ee8367c3755bfd0015b89f8b9839cbafd50f3e50513a4f28ea041546b93403a9f982f68dad54a8bb51f530244c2ed7353b1b2493b7634e3496afec7407ec6ca2a4cbef20178b95d3fd105557b8d5ed6955e09a92e831c4fd46c19d873316d659504c2439917991be0af9be9f78411ec890ddadc2af9c81bc367285d03ce2f9c092e8a14b9418e3baf7e450e8a64e8b6794fb7ea802a3c7ea8bb8d2ac190d9c0133318bdb13798811d5feb5e83f7b45cfcc91ec394de4a1683ec3639706aa67b0499ecbad06f451d9539459bb17a95391e1b997d41f83b687d1f8e53e3ff5b009a82009b95c5f54b9cdae04dd4778e747ceba3f3ed41a9e79afff406fdfd414583dc7584ffabd7154c1bd5d326af8c68b043548bd4ebd4c07d4975926557803b5d3a5a1c171e7bb98ec16da4a9d896754877e42f3929ca0fe34d28451709a72eb0926b00413f588487196aa5156c9e977846e53ce97d405185596743c75e9fa36b43ab064c1a521fd2be4156452b3444bb625b8134d5b76eb4f6a08407c4123c606fe86b190015f82db8964d6134bc50e5f9bd964580da97f0966a885a5eb0be68e2d542f482511b13484af0c104296979435d7fb20bfbb0d53cda89bea45f378b3a4f78f9c173a4d289c997a9bf0f9f587a2bba5e4ab1a1ec5f0503b180d523ae56124ebd39654a5b8c3e9feb690f0e3f53ccfb41cc5c84bb031de030a160294873aae784cbd5305b425554e1d4208f0e91ac102d217df3552dc0cf95040aae95085b765d4dcdf7d8b4cdd261fdc2e20875ccb969a0f454158514f7513e90da56f9039fc78dcec080235361dc07d7589f6f268b5e8887ba7bfa3f11df6946dc80afc21c91a84d41ad0e5220c764199df35f28b119f00ce1bf1313adea8566d3ddeacb35567e616d8e07f8e546f43766ed13b823e14ee35e632c7fd6cb27ffe69da4ebbe0effdd1a68f5ece616b934451d718b04c511d226882d21bd222f6abf6d3c87f7974c27dc607025d10ecf90e94466177a72c1dc360bfbe6cd65d85c19cde28fe5fcec85611f326e90689a374f7366409378f9b70d06e8b60030c52a234258117e33d94e79e4a761a0d7e4fd5df367363ec6cfe1591d917bc5be884f2429fb4b7d80723f122c9ac8714a2a3e29ca2e869c6f98b64a166707b0d2bcfd5d650811617f5eeb912ef5d2e96ee0b20dc6faecf1e1707469c07529515f1d4c5b3415f32537369dd4d550cd65c06bd1f720d43b97086669cb8b22a1b778479f77d84e7b40cf95a99ba32db8bd8581fbae4bc21a055f208d45bbb64d0feeee23e7f85914f9633ad26b78cdd1944269bf772c82e0d43b4e516273d038b444b55ca089c878d71e1831a4e5ca8466e956742621c9bdbbcd4fbadbd201f52d95200bf1592dd1317b87ba0aeea1494801212942128a79d465d78375f88abbc9ee18599f3148a83515ca14cb5550d97805592ea3669fd8c3892f8a24b6be301f45371c899742df2f003973b4e2e7282585cd27a89e54b6a9c731142c71329e7af11f4eec7fdc7c43d5d4e311d75506f31ae2cb3cb03103522edbe3a7944bd6038acf09fb8070e271bcb6a0cfac15c90b257fac5bece1262047b429f301951f6269cb1a66ff7b4b98e5d55e417f58f502b43b29a7eda408e4e0c4e9bf20b7240afb155b51a74f61e1932de10e680e172916c646c2561ee57381ebf44d65b7dfb0fe89463f27ee9e727d8990fe71c6f1ff195e5350ffb17a92c82bfaf1b8f9776fec4f2a5111edfe14392ebc48e3cae63c22cd86f9051250b37f5fe61d366d7714700007c6e6fd4987d443f1ec6ae570d182225e7611bd4d6e46e8f09df8770dfba86f189ce0ed976f0fb00beb95db903feed62161efafbd51f1dd6f7fb0c9b48efde2e6f58b2d39b3954d92345fdfc20714296ec153bf6ff43c8ce1e9f98e5637b845050e95c1af362b7c55c74ef5ecade8882dfd62b7afa8409e10be6127db879375a4d557375fa69386c6568dca06698da8f5e5958517bb319b2074a88709c8bfb2988faffe058743cc5517b4f2a193eaad23224c944042520797a183915f774663217bd84a441ca91fbfca9e331da01cd08066136286a6d9e6541b21137d"}, @NL80211_ATTR_FILS_ERP_REALM={0xa2, 0xfa, "7af1492772c79d1e71b6fdf0e7fe75142bf35d35c77377ff30dad42a45b57f53190bb4ed52ca5eeb0702ba7e2f783349c6d285d625a565bca399b587dfc2e73f8a956c87778dd5677ddef7511c953a659ea964beca8cdeec8a09265ffac77a8ec1e038d9ace75d20f912b5af2724f98004029f8a19c28abe1aa8b01f6dc9a00afcf585be5158373ad3075b91e7e86cae6d853966b6a10b867f1532e50411"}], @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000082) pipe(&(0x7f00000001c0)) 02:53:00 executing program 3: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000380)=[{0x4, 0xffff}], 0x1) semop(r0, &(0x7f0000000180)=[{0x4, 0x7}], 0x1) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000040)=""/155) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x4, 0x6}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) 02:53:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x386}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@remote}, 0x14) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 268.883533] overlayfs: workdir and upperdir must be separate subtrees [ 268.913639] audit: type=1804 audit(1603162380.943:236): pid=13360 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/162/bus/file0" dev="sda1" ino=16365 res=1 02:53:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10010000, 0x1, 0x0, 0x4, 0x4}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 02:53:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 269.074065] audit: type=1804 audit(1603162381.093:237): pid=13376 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/118/bus/file0" dev="overlay" ino=15824 res=1 02:53:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:01 executing program 1: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=""/113, 0x71, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000d11fc00081ffffffffffffff0065000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f0000000180)=""/190, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, r0}, 0x78) [ 269.131692] overlayfs: './file0' not a directory 02:53:01 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0xffffffff000) 02:53:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x70940, 0x0) fcntl$getown(r1, 0x9) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000480)=""/246, &(0x7f0000000040)=0xf6) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x8, 0x40010, r0, 0xffffe000) [ 269.178237] overlayfs: workdir and upperdir must be separate subtrees [ 269.223592] audit: type=1804 audit(1603162381.253:238): pid=13385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/163/bus/file0" dev="sda1" ino=16414 res=1 02:53:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:01 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000206030000000000000000000000080005000400000000000900020073797a3000000000050005000a00000005000100060000000c000300686173683a6970000c0007800800064000000000"], 0x50}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x400, [0x9, 0x8001, 0x200, 0x8, 0x6, 0xff, 0x800, 0x3, 0x0, 0xfffb, 0x4, 0x3, 0xff, 0x9, 0x8e8, 0x5, 0x1, 0x100, 0x2, 0x1, 0x5b90, 0x40, 0x4, 0x2, 0xfff, 0x7505, 0x34d9, 0x3, 0x7, 0x1, 0x3e1, 0x0, 0xddbf, 0x0, 0x7e33, 0x61, 0x6, 0xfe, 0x1000, 0x1, 0x8, 0x200, 0x5, 0x9, 0x8, 0x9, 0x6, 0xfffb], 0x1}) 02:53:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0xe5, 0x400, 0x1, 0x9}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x1, 0xffffffffffffffff}) splice(r5, &(0x7f0000000280), r3, &(0x7f0000000300)=0x9f14, 0x8, 0xa) sendfile(r4, 0xffffffffffffffff, 0x0, 0xd811) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x14d482, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001400)={0x0, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="0100200000000200000003000000bc000180150001006574683a626f6e645f736c6176655f30"], 0xd0}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x17c, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc60}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x300}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x798a}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf42}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2db}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x519}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x894}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c46}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x63}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x26000010}, 0x4004870) epoll_create1(0x0) [ 269.389284] overlayfs: failed to resolve './fil': -2 02:53:01 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') fanotify_init(0x40, 0x80000) read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1c}) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, 0xee00, r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CHAR_RAW_ZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x0, 0x7}) [ 269.421574] audit: type=1804 audit(1603162381.443:239): pid=13406 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir832393920/syzkaller.U9ygL2/164/bus/file0" dev="sda1" ino=15889 res=1 02:53:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x3058c3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0xffff, 0x4, 0x10000, 0xffffffff, 0x1, 0xfffffffe}, 0x1c) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x60000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x40, 0x3281, r1, 0x0, &(0x7f0000000080)={0x30362, 0xffffffe2, [], @string=&(0x7f0000000040)=0x4}}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.510976] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.533464] overlayfs: './file0' not a directory [ 269.550024] audit: type=1804 audit(1603162381.533:240): pid=13413 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/119/bus/file0" dev="overlay" ino=16387 res=1 [ 269.554275] Started in network mode 02:53:01 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065724469723d2e2f66696c651b8ef00b64ec7e00354389258c4bd2b9f51a99032ef3a1fce91fb089e0671b19d37c4caf4c4c56"]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x525642, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 269.606862] overlayfs: failed to resolve './fil': -2 [ 269.623899] audit: type=1804 audit(1603162381.603:241): pid=13422 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/119/bus/bus/file0" dev="overlay" ino=15846 res=1 [ 269.639328] Own node identity aaaaaaaaaa17, cluster identity 4711 02:53:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x101, 0x1f, 0x3031ccbc, 0x4}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) [ 269.663852] Enabled bearer , priority 10 02:53:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0, 0x12}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x2c2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) [ 269.738378] overlayfs: failed to resolve './fil': -2 02:53:01 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') fanotify_init(0x40, 0x80000) read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1c}) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, 0xee00, r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CHAR_RAW_ZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x0, 0x7}) 02:53:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'sit0\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.848518] overlayfs: unrecognized mount option "upperDir=./fileŽð dì~" or missing value 02:53:01 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x121000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x101, 0x1, 0x8, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x40}, 0x1) r3 = getpid() ioprio_get$pid(0x0, r3) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) [ 269.897243] overlayfs: unrecognized mount option "upperDir=./fileŽð dì~" or missing value [ 269.908736] overlayfs: failed to resolve './file': -2 02:53:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:02 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x20, 0x4) r1 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000002480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1115005, &(0x7f0000002500)=ANY=[@ANYRES16=r0, @ANYRESOCT=r4, @ANYRESOCT=r3, @ANYRESOCT=r5]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:02 executing program 1: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x8800) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000, 0x200000}) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x3a32, 0x0, 0x8, 0xffffffff, r5}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:53:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000d229000829bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="090018000f00080004000500"], 0x24}, 0x1, 0x0, 0x0, 0x60044040}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000b0}, 0x40000) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) r5 = fcntl$dupfd(r4, 0x406, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) 02:53:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0xfee, 0x808, 0x97a}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) [ 270.124502] overlayfs: failed to resolve './file': -2 02:53:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) connect$packet(r1, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0x5, 0x6, @random="fb4eec3175fb"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:02 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x80, &(0x7f0000000100)=ANY=[@ANYRESOCT]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 270.334724] overlayfs: failed to resolve './file': -2 02:53:02 executing program 3: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x9040, 0x0) mount(&(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='openpromfs\x00', 0x2000000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) r2 = getgid() sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)="cb9a53b8d420c2e2b8a61b28b7918ab94d9b3452c6bbc53ee464fbc4e0ebe03068741d57cebf71bb69bd7a4e805c46ab44de4cc84d183dfb5df78206e0aea53fe989c2f4d7e8ac3eb99ad459bab6df1d6089b3ec7fed72cc29f6c50c6e534b4046071e3daeb19ecf632bff272d356b7765b16d8d7639a0b8c4241deb4523ca1a8bafd92982e67a67f0170aa6292045e13766fa", 0x93}, {&(0x7f0000000240)="3416be4a669ef97f957ab2e1c4a6b1a5aacd89879a90760389ef18ac75a6ff4aedc39dd65af321dfefefb3ff967e2f00494ceeabac1f43eaa2145565ac0bdda1c78c1b5c01e6dad0f74516d896b987caab4d5543d12376c8d4f9ac06446a3276af3920eb25980a5f9d6e16df86fea5e2f4682d0e76026354e372e23a84b5600bc36c52db5eeb5af93c764fcc3fccf6470baf14ebef4f2db4c5b8c2114205bdb02c607751dc5655f61d846dd5224b57e7d70a51d06620f4e3b67cb6c184d2a8e49b33a9e8c64d7f08bd2fe2e3bdb0fb2bcdd1e25291aff8539e54145b949b9ecf019a808c7141cf89", 0xe8}, {&(0x7f0000000340)="977982d13e508c4bc7759abae161b1e8a529a3f889317968a6f5d3c0fcbd2bd4c35281fa11fd20367bbfc39fafbae4f885a5fe56d37415f7598f0ee65b34d054e88218c188b91a80c24953deac27a6457f5dfc9fd29806e10144a414b8", 0x5d}, {&(0x7f0000000400)="bb8952b4c042846b7c0a5a6f1d657945468b49ad9894eee7cfc4f7", 0x1b}, {&(0x7f0000000440)="bb8614e6ef6547f4c942a51ef850d6866e8c9f3a9b196ac6a2911f28534f9a6429e84836c1d8", 0x26}, {&(0x7f0000000480)="9f874d478f8c30b971b1858e0287a607fd001d644a65dd0846d6a4dc18786b3b12cc573a7b9f6b470e908ca5f60ba08327526b13953e7681160a7a58f36ac653dac5107ddf0ac20bcb1635846bc16ab235de17729bd98307c931b2625b108a6a58fbdaf29e1535978caa5fc79b0f39ae83cdce554960204b3baa9a018ba4c8eb143cffb089a01a1eb487afd16e6cdd2717fc872e16eaef00eb16c254aff5a2d740f780bc4452d29982c175f95261417d3f9eae8e76a8c7b3561ea8dfe3193a891deba76ec55a9a88d916fdd53ae9d700ced11b04d90497185a09ec3cef57661d75815f3bfa31e33f67fb", 0xea}], 0x6, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x20, 0x20000840}, 0x40) 02:53:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 270.467154] overlayfs: unrecognized mount option "01777777777777777777777" or missing value 02:53:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.560511] overlayfs: unrecognized mount option "01777777777777777777777" or missing value [ 270.773211] 32-bit node address hash set to aaaabd00 02:53:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') syz_genetlink_get_family_id$netlbl_unlabel(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYBLOB="54841a85ade1c835870274985246aff623792f2f24bf3a97333298f7f323d5d665d2e44ec6fdbf8c5d0fd130d035ad01f0865c2d9fd1f39ccc8ef62b1ae652f0ff80b989bed1c0bb14960c19d475e54d6d7c14d78a6c975fd0f30ba9132d8776040b74d13630f1c20ff9de0aa38366441c5285d891f394068ed146886511b48380b4c0ce46389add1a5e2d7ca01942f4ae174a4a86859f4e53a28de7aec0a452d52c40e935828b2f6fe9983da5edaf319eeefb3307bc6b230f024735d32a33128273beca4cf4d02f623d3bde5478ad915678131a2ef1c59128032802816a6263017ce419ecd6f5", @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0x100000530) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000004eb965c363798bb1b0647a", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fbdbdf25ef02df644279021b020000000800020002000000080002000a000000080002000200"], 0x2c}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x81) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x2000000) socket$tipc(0x1e, 0x5, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 02:53:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000000c0)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:53:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r5, 0x0) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r7, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x33080c, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d9e224fa5756e69782c756e616d753d282c64666c747569643d", @ANYRESHEX=r5, @ANYBLOB=',fscache,loose,privport,fowner>', @ANYRESDEC=r7, @ANYBLOB=',appraise_type=imasig,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,\x00']) r8 = fcntl$dupfd(r3, 0x0, r2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = getpid() setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) perf_event_open(0x0, r11, 0x9, r10, 0x0) sched_setaffinity(r11, 0x8, &(0x7f0000000040)=0x800) sendfile(r8, r9, 0x0, 0xd811) 02:53:03 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/pid\x00') mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:03 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:03 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xfef]}, 0x8, 0x80000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = signalfd4(r0, &(0x7f0000000140)={[0x8]}, 0x8, 0x1800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x482900, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000280)={0x6, 0x8, 0xfffffffb, 0x4}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r3, 0x0, r0, 0x9, 0x80000}) 02:53:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:03 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 271.320301] overlayfs: './file0' not a directory 02:53:03 executing program 2: mkdir(&(0x7f0000000240)='./bus/file0\x00', 0x5) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus/file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000300)='./bus\x00') mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x0, {0x0, 0x0, 0x3}}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000280)='./file1\x00', 0x10000, 0x6) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442c06000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x70bd26, 0x0, {{}, {@val={0x8}, @val={0xc}}}, ["", ""]}, 0x28}}, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffffa6067d5b01000000000000ffffffffffffffe2100000f2ffff0720000a00000072afd561f1502ffa88e2cdb9ce"]) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000100)=0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x401, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x6, 0xfffffffd, 0x2, @remote, @private2, 0x8, 0x7, 0x0, 0x6}}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x5, r2, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) read(r1, &(0x7f0000000140)=""/242, 0xf2) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000240)={0x82, 0x20, [], 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1e, 0x13012, r1, 0x0) [ 271.534020] overlayfs: failed to resolve './file0': -2 [ 271.572638] ================================================================================ [ 271.581892] UBSAN: Undefined behaviour in arch/x86/kvm/pmu_intel.c:299:45 [ 271.585916] overlayfs: './file0' not a directory [ 271.588864] shift exponent 213 is too large for 64-bit type 'long long unsigned int' [ 271.588883] CPU: 1 PID: 13599 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 271.588896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.623165] Call Trace: [ 271.625917] dump_stack+0x22c/0x33e [ 271.629558] ubsan_epilogue+0xe/0x3a [ 271.633286] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 271.639445] ? update_permission_bitmask+0x135/0x370 [ 271.644558] ? kvm_irq_delivery_to_apic+0x871/0xa80 [ 271.649607] intel_pmu_refresh.cold+0x9b/0xa0 [ 271.654822] kvm_update_cpuid+0x6d9/0xaf0 [ 271.659074] kvm_vcpu_ioctl_set_cpuid+0x6ab/0x970 [ 271.663930] ? _copy_from_user+0xd2/0x130 [ 271.668437] kvm_arch_vcpu_ioctl+0xea3/0x2e10 [ 271.672944] ? kvm_arch_vcpu_put+0x5a0/0x5a0 [ 271.677392] ? find_held_lock+0x2d/0x110 [ 271.681463] ? __perf_event_task_sched_in+0x723/0x920 [ 271.686663] ? mark_held_locks+0xf0/0xf0 [ 271.690734] ? lock_acquire+0x170/0x3f0 [ 271.694710] ? kvm_vcpu_ioctl+0x175/0xe30 [ 271.698867] ? kvm_vcpu_ioctl+0x175/0xe30 [ 271.703029] ? __mutex_lock+0x3bd/0x13f0 [ 271.707102] ? lock_downgrade+0x750/0x750 [ 271.711255] ? kvm_vcpu_ioctl+0x175/0xe30 [ 271.715413] ? ww_mutex_unlock+0x2f0/0x2f0 [ 271.719661] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 271.726078] ? _raw_spin_unlock_irq+0x5a/0x90 [ 271.730589] ? finish_task_switch+0x174/0x8b0 [ 271.735096] ? finish_task_switch+0x146/0x8b0 [ 271.739603] ? __schedule+0x8ed/0x22e0 [ 271.743501] kvm_vcpu_ioctl+0x8af/0xe30 [ 271.747485] ? kvm_get_dirty_log+0x590/0x590 [ 271.751900] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 271.756494] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 271.761270] ? retint_kernel+0x2d/0x2d [ 271.765181] ? lock_release+0x429/0x8e0 [ 271.769166] ? kvm_get_dirty_log+0x590/0x590 [ 271.773579] do_vfs_ioctl+0xcdb/0x12e0 [ 271.777475] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 271.782678] ? ioctl_preallocate+0x200/0x200 [ 271.787184] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 271.792643] ? __fget+0x3ad/0x570 [ 271.796108] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 271.800371] ? ktime_get_ts64+0x2d3/0x420 [ 271.804536] ksys_ioctl+0x9b/0xc0 [ 271.807997] __x64_sys_ioctl+0x6f/0xb0 [ 271.811892] do_syscall_64+0xf9/0x670 [ 271.815702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.820903] RIP: 0033:0x45de59 [ 271.824113] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.843018] RSP: 002b:00007fe6fb010c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.851346] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045de59 [ 271.858624] RDX: 0000000020000440 RSI: 000000004008ae8a RDI: 0000000000000006 [ 271.865903] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 02:53:03 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsync(r1) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) 02:53:03 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 02:53:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 271.873181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 271.883756] R13: 00007fff97f9ffef R14: 00007fe6fb0119c0 R15: 000000000118bf2c [ 271.891044] ================================================================================ 02:53:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x18, 0x13012, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x148) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$EVIOCSABS0(r4, 0x401845c0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="020000006af49dfd3d59ca94dcb35b72e00fda56546ac5342415b6b01f33a650ec5edfc32bccc4cee4001081ce571b469f044025ecfda49f089eb39fd3734077023187641e86ceaaa4be8991d6285f15f3381753a32e370567207f5d7bc619948b3b101fe6da665929776da39944f8480d3d1db73a9f8382e00c71eb0ff08a558576588f37988635cd890006e857ad45fd5db53fa1c462656992b924596650b6da8d4195917b101ff932ff2962417bba68c7d88945b00e5fde9c10ee7cfa5898a5799f65672054989d2f69eb032a1fc2f732cd7198", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r6, 0x200}, 0x8) 02:53:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0080002000000000ffffff7f430c008c00660000002f9078ac141438ac1e0101070be17f00000164010101071bd9ac1e01017f000001e0000002ac141443ac1414bbe000000144241021ac1414bb000010000a01010200000000e00000010000001fffffffff0000000944144d916401010000000002ac1414aa0000000744145093ac140942000000006401010000000081940400000100"]}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) ptrace(0x10, r2) ptrace$getregs(0x420d, r3, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0xd811) 02:53:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:04 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x1f8, 0x24, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x6800e12b80e80797}, {0x3, 0xffe0}, {0x4, 0xffed}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x7, 0xfffffff7, 0x0, 0x5, 0x52fe33e7, 0x7}}, {0x12, 0x2, [0x4, 0x1, 0xdb, 0x169f, 0x7fff, 0x80, 0x5]}}, {{0x1c, 0x1, {0xff, 0x69, 0x5, 0x7, 0x0, 0x6, 0xbda6, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x0, 0x58, 0x4, 0x3, 0x1, 0x7, 0xad, 0x7}}, {0x12, 0x2, [0x0, 0x81, 0x101, 0x2, 0x9, 0x40, 0x92]}}, {{0x1c, 0x1, {0x3, 0x75, 0x3ff, 0x1000, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x6, 0x7, 0x9, 0x8, 0x3, 0x81, 0xfffa]}}, {{0x1c, 0x1, {0x0, 0x81, 0x0, 0x80, 0x0, 0x0, 0x8, 0x3}}, {0xa, 0x2, [0xff, 0x800, 0x101]}}, {{0xfffffffffffffe1f, 0x1, {0x5, 0xc1, 0x5, 0x8, 0x1, 0x9e, 0x101, 0x1}}, {0x6, 0x2, [0x77]}}]}, @TCA_RATE={0x6, 0x5, {0x3f, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x87, 0x1f, 0x8, 0x1, 0xfffff82f, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0x9, 0x1ff, 0x5155]}}, {{0x1c, 0x1, {0x2, 0x9, 0xff, 0x1, 0x0, 0x200, 0x1, 0x6}}, {0x10, 0x2, [0xf801, 0x6, 0xe03, 0x800, 0x1ff, 0x2]}}, {{0x1c, 0x1, {0x7, 0x5a, 0x5, 0x80000001, 0x2, 0x0, 0x10001, 0x2}}, {0x8, 0x2, [0x8001, 0x4]}}, {{0x1c, 0x1, {0x2, 0x6, 0x6, 0x0, 0x2, 0x9, 0x0, 0x7}}, {0x12, 0x2, [0x99, 0x9, 0x1, 0x6, 0x81, 0xd10, 0x3ff]}}]}, @qdisc_kind_options=@q_pfifo={{0xa, 0x1, 'pfifo\x00'}, {0x8}}]}, 0x1f8}}, 0x4) [ 272.360025] ================================================================================ [ 272.368640] UBSAN: Undefined behaviour in arch/x86/kvm/pmu_intel.c:301:13 [ 272.375586] shift exponent 97 is too large for 64-bit type 'long long unsigned int' [ 272.383389] CPU: 1 PID: 13652 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 272.391281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.400639] Call Trace: [ 272.403237] dump_stack+0x22c/0x33e [ 272.406878] ubsan_epilogue+0xe/0x3a [ 272.410612] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 272.416770] ? update_permission_bitmask+0x135/0x370 [ 272.421888] ? kvm_irq_delivery_to_apic+0x871/0xa80 [ 272.426959] intel_pmu_refresh.cold+0x75/0xa0 [ 272.431494] kvm_update_cpuid+0x6d9/0xaf0 [ 272.435653] kvm_vcpu_ioctl_set_cpuid+0x6ab/0x970 [ 272.436671] overlayfs: failed to resolve './file0)a¾dsño[gé*r¢Y®¿m„5-c©µæ­xÎrßv(Û†— HeÓêAéÇ*Ê': -2 [ 272.440498] ? _copy_from_user+0xd2/0x130 [ 272.440519] kvm_arch_vcpu_ioctl+0xea3/0x2e10 [ 272.440540] ? kvm_arch_vcpu_put+0x5a0/0x5a0 [ 272.463088] ? io_schedule_timeout+0x140/0x140 [ 272.468111] ? lock_downgrade+0x750/0x750 [ 272.472284] ? lock_acquire+0x170/0x3f0 [ 272.476267] ? kvm_vcpu_ioctl+0x175/0xe30 [ 272.480419] ? kvm_vcpu_ioctl+0x175/0xe30 [ 272.484581] ? __mutex_lock+0x3bd/0x13f0 [ 272.492816] ? futex_wait+0x438/0x590 [ 272.496888] ? kvm_vcpu_ioctl+0x175/0xe30 [ 272.501041] ? ww_mutex_unlock+0x2f0/0x2f0 [ 272.505279] ? task_clock_event_start+0xb0/0xb0 [ 272.509960] ? hash_futex+0x12/0x200 [ 272.513685] ? drop_futex_key_refs+0x6f/0xe0 [ 272.518104] ? __lock_acquire+0x6ec/0x3ff0 [ 272.520842] overlayfs: failed to resolve './file0)a¾dsño[gé*r¢Y®¿m„5-c©µæ­xÎrßv(Û†— HeÓêAéÇ*Ê': -2 [ 272.522346] kvm_vcpu_ioctl+0x8af/0xe30 [ 272.522361] ? kvm_get_dirty_log+0x590/0x590 [ 272.522377] ? mark_held_locks+0xf0/0xf0 [ 272.522390] ? do_futex+0x163/0x1c60 [ 272.522403] ? mark_held_locks+0xf0/0xf0 [ 272.522420] ? mark_held_locks+0xf0/0xf0 [ 272.556786] ? find_held_lock+0x2d/0x110 [ 272.560855] ? kvm_get_dirty_log+0x590/0x590 [ 272.565268] do_vfs_ioctl+0xcdb/0x12e0 [ 272.569163] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 272.574357] ? ioctl_preallocate+0x200/0x200 [ 272.578778] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 272.584238] ? __fget+0x3ad/0x570 [ 272.587703] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 272.591942] ? ktime_get_ts64+0x2d3/0x420 [ 272.596091] ksys_ioctl+0x9b/0xc0 [ 272.599528] __x64_sys_ioctl+0x6f/0xb0 [ 272.603419] do_syscall_64+0xf9/0x670 [ 272.607204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.612399] RIP: 0033:0x45de59 [ 272.615586] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.634468] RSP: 002b:00007fe6faf8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.642169] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045de59 [ 272.649430] RDX: 0000000020000440 RSI: 000000004008ae8a RDI: 0000000000000006 [ 272.656683] RBP: 000000000118c200 R08: 0000000000000000 R09: 0000000000000000 [ 272.663936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c1cc [ 272.671198] R13: 00007fff97f9ffef R14: 00007fe6faf8d9c0 R15: 000000000118c1cc [ 272.678457] ================================================================================ 02:53:04 executing program 1: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) 02:53:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x10000}, 0x8) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') 02:53:04 executing program 2: mkdir(&(0x7f0000000240)='./bus\x00', 0x132) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40000, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:53:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.824093] overlayfs: failed to resolve './file1': -2 02:53:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:04 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000003680)=[{0x0}], 0x0, 0x0) [ 272.902507] overlayfs: './file0' not a directory 02:53:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x3, 0x76, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}, {[@timestamp_addr={0x44, 0x14, 0x7, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote={0xac, 0x2}}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6b, 0x81, 0x4]}}}}}}, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:04 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./bus/file0\x00', 0x0, 0x2, &(0x7f00000025c0)=[{&(0x7f0000002400)="fd8a659115cbb56d5102b97260ac18dde1746bb6e51330e0fce1f66e4b9f1ef5a25090ffb602e4a931892ee7d0a61b480e2fb3caa670ac2acbd03ecc89b6e783279037ee60cd3a9921e4a77bb61986849b5db16ed8ec21eba82fcbc22c19c3934fdb917abe305ed830de04049803b6e90425fedf206ecf9fec623994179e2559aec26b60474ceafe068a109ce47eca3705a37821ec27344e5a4d6a26b57bcf6f91868f3ece22cf4751524db911e0b79e86b4fd2b416299a256", 0xb9, 0x1f}, {&(0x7f00000024c0)="6dc82ac0ffd534e7abc3c0a00b813e382c784f856dda02991372fde4ecb8cbe43311a29f13b23375a6fb15a9cd75d120be6c8283af68a7971048161c7704efccdebea850d25e11c92f65d6130d5c9b3694793df67353f91e781953b763101c09c5447bb129bdf630061eb7712a6a2ec11875309201a39422935d7eff72c7ab2ad538751825a09cf05ebb18bfe0c60adc7954154d47167ebdce218c24f12c9daccea227b10c2a5d620c8c6d1dce09fdf6f97ec0f8c8884c922aa69cbdd6f3212b0215c521db8de4e40b0cb3dbb269663ada1976dd1c95524d402d77", 0xdb, 0x2}], 0x800000, &(0x7f0000002600)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@showexec='showexec'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}], [{@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000280)={0xfff, 0x8000, 0x9}) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:53:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_GET_KEEPCAPS(0x7) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000040)=0x1, 0x4) [ 273.103336] FAT-fs (loop2): Unrecognized mount option "subj_role=overlay" or missing value 02:53:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) [ 273.153346] overlayfs: failed to resolve './bus': -2 02:53:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 273.238761] overlayfs: './file0' not a directory 02:53:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1a, 0x13, r2, 0x2000) 02:53:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0x80000000) r6 = accept(r5, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000180)=0x80) sendmsg$IPSET_CMD_DEL(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000a0601030000000000000000020000060500010007000000080009400000003f09000200666e6e008326d147afaf8543fce90ab82661a59020bf6e3ceb6135effe92fada1a8c6d252f99eb76c26a553003807e2d699843fdb810b53a7d90f2c61a1e96b8d177f3b135edb1601ce49c6a2fc4a59e0939a50c75d0be70dab7912cece1558721a2b1a8fc0dcf81f11e0a73df6a39efa8b1463c8e90282f2165f4dc7959bbffa6db83ee4810919b469bd924a53dc46341008e99fccf237b9e1aa2809a209572ae44a638a4ecda86cb981ef62ba40b4fa051b7"], 0x30}, 0x1, 0x0, 0x0, 0x10048801}, 0x4801) 02:53:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:05 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000002900), 0x2) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="6c686165726469723dd5d1ddaa7fd15f192e2f6275732c776f726b6469723d2e2f66696c65312cea6d087270657264694bd40bfbd9cd80b2da26"]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) accept$netrom(r0, &(0x7f0000002400)={{}, [@bcast, @netrom, @remote, @null, @bcast, @remote, @remote, @bcast]}, &(0x7f0000000340)=0x48) stat(&(0x7f0000002800)='./bus/file0/file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x6, &(0x7f0000002740)=[{&(0x7f0000002480)="9ae179341580b8a30d66c64a3601afa8da1ea64259b3ab543883001d98c35dddf8f72ab1cd0a4c3a60515187d92ad2ddc7633d4f1c1179dd50706e8e1fcabb981938302ecea501d2a00863", 0x4b}, {&(0x7f0000002500)="2b8b13715a8ef6b080a5a2fa127b7afa4cb806e422d4f6a986714ba65e23b094c29b5fdafa9e293be6b1763e7afac9f746fde7e18b96c3d45ba466612df31e291d147a99f0dad857e3a4a3af8da9364ed58aba9532c83b", 0x57, 0xaaab}, {&(0x7f0000002580)="10ca34439a546d3c6c95a4a38234f49edfe3dbbeee504b3a2530e3fbfa67082eb65c69aa4f086c474526242a6491b117b7328e8175682f682ac1fec98abf343c1a334e81d4ac57f2f9df2f1d620081bdebfca679873904598839e4ae54761801388388417868ea4ab4e21e801abbeb2728", 0x71, 0x94}, {&(0x7f0000000300)="75093f40ce", 0x5, 0x800}, {&(0x7f0000002600)="89e3a7f7c91363296d1514e5e9ab85931eb4b7925184e532b51ddc664cde65df168938127289c955f64133720426428148371ca6d8f9f9bf80b20ff70c6cc2ab12e797bcdec854a2616ab774f23e892ec8f5fc481c561b382a848e5a39ea8667cfc4c33a808b47ec1e7890ea589950ab2df041b74fd30bab7ddbc135de00d8ef6eaa4e197b41199ada77050f5c10328ad2bee3e5d1f9963bccc438d72c72ca03384e8ce0ff4b4e5243ffba02", 0xac, 0x5}, {&(0x7f00000026c0)="d9fc38614224818d2526878ead1460bc2412d67650aef26c5ba2271ae50c8cc67f9336a95ff531c9099d8d11daef190d963bb3bde4e45393c28aef67c01c918d9d5279d59601acc89bc3bf0b0b2360aa669a2aaed6b72348", 0x58, 0x8000}], 0x208002, &(0x7f00000028c0)={[{@nodiscard='nodiscard'}], [{@euid_eq={'euid', 0x3d, r1}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x400) sendfile(r4, r5, 0x0, 0xd811) 02:53:05 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 02:53:05 executing program 1: add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0) 02:53:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000200), 0x4) fcntl$dupfd(r3, 0x0, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280)="9930389d591949c51b8bdc1e6272bff41d39ecbf1805ae3673f6fb80b9dad2c0c3fb4b7d66689dd9faaa55b96df83a675f363eb61d9879b99233d33dbe356470da8900487e178d9deb9e95f0cf3e78a23b304f826a4fbe207158dcb4b11919d0cf7443bcb79aa97e7e51233811f4ff1e4027460a61f0edf5bf381cb4ed7d6db9d2cfb9530d9efd50a06243330ddcb6b2b18459213cbf47f29c020ecc9207c1af4049a56fb7b2a0ab02c4877821984bf56f4ece4a69dee3a4a515f9ead8c5cf7b7b41352d4810aac41a89d105fa49093a3f57eb288bb8ad6c8247545e00cb9962a651a7b1a88814fbb674c23fd4dacc6eb7f2548bfba8918dfa1ce342309c46129c07ec8ff3a28399ffa440d509f43031cc2bb70d7035e513dd0bc07877fbcae392df80a0ff916bc65c95634442b4dd120087a5ddc18ee02622c612a54e1d307c00ef4ac125aa849ccdb3ee9733adebbf2137a479c50bb0cd9b2b918597399bb49033f3ed475d665784068ace3ee0fb165c642a7924922252fd04685895402182dfcc8cf5b9e833eadecaf04315930d8d79400ba5b5428efbe39a3c5ec07a02e64c9cfa1c8c92f04a731b307864d50479bff68323ffa978bbc9987c59f0154a81e320afea2f054912684ab303247ed1454b3ab20fe4da3d97a66f10f3a8abf106480ed9dc46952b8dd6bc37fc0f470827f2cf81c9169c658e557174681b58c9147f488d9a26d5cd37cbbe802542bf3543e1c0838aa995231eb99417ee19af2cd51da7b182a58f2c11b8e85a60ca2e9db737b5b18393602c0ce271072f6f154c3d5593f90b29257ea1ea5a9f0fd7f4545efcee174cc811e095c65c08919f086585ef59d4fe920ed0cb587849f3f7572eb8ed7df20cf2f593da4d808744a811a0bf11a7e290e2c26c1cfc52bed551cfa780b81e82aa8d33a1c61db207af787903e7177a898abc42df7a9a798a0c9d391d3e169c1f646c4ab261a34fd0e1917ea6d3ed03b23abda928f70decd08d4eef348aa8292a10db1cfb094a84ffa0809237a415058ebfade22bddf9e9a31dcf5f5da28aa230159c8e88c890e588c904d1f64971983e387bb7486752ddea9601664d38624d93f6790a79734cc4a959ea123ab18516edcb9b545a3da78b9a113822ea6b2d09cf3c3b52fbae580c475b2c63904309de665a0ca85ce381a4b0dc093b84032fa91ef5b4bbb279becd9ccfab1d06f065e97e0bee4cabe03a06321185d03a32b1a76645337821add618f0c1efc13ac0986e1ef19d5dbcf06fb1c4c9f88623a146b784a41ec2e88ee30ef70cf2814ca87002e0a75412d06e790b493a5c6439241fbbf44e956c107ba52bfe224538edae710a8966c2d2a136682d1d0fc28d950238187cd7cddffb25fc754566cd6f711456351ee4f80f06dad33bc815348d20b1e521aa43023cde0e7836476398d245a93f85bfbca88cd8fbe4c05ded9f084ab63ff5bb3ee2f37211ffce36dbac4be730581238c2fcc31de1be00c8ced7bc5785ec3726d1a6d8eb00adb87e43bc2a29337a06e615d266e0d26b8f0857a2348b83138aa87df77136b154f60dcb34d24f034cbd4445ca82f27d373ff3de8ee161e8b0e87427a1116b657451f54bc1b1a557d962290bd46089d9963179bbef8c7971764af2b152ca6a9e6177e033df45c3783440c2aec99d64d2e9821dcf0146e04997884fa9b934a896cb829ce943c2ea297df3b9865d663868f3ef1ff57a74f0db2b64167c5c55aceeb6ef71c620634ca6aa1aa85f993afcf778ba4b963675f02932d8dfac1799d5248cdbeb408f3775372b6eac6786e2b678870242e49db6115b455ee92b065aee7c4ab4a2ee6c45dc38b9f22f79e80beb80fed05b85cbe0d69059822214dff7cc6866bda148600f616d8a7bf7d4b4d1b6e4e950d64ea21acdb3d6aa1c82a35b2e70b7f4590c28997dfc1b52c223343fd9898e3f8c0e32820ab251dfb3be4f43f53f42e198def1c893e6ff9eb40f7cfb4f12f00f632d6eac1dd261a99f645ecf0fe2e6dd8ca51e80d08250dda5fe59aeaeec431253e96f6348f3215235776a7c1622a08552c9ec0837453215933ef56414e29cfd9422b97df59bd0e438edff7f140e81e4b00eb6b43489494a55b4d919461c9f7bb86a4c4304925d2ebec72182c9df0570c73d18821d602c128033bfe7084f2fd51647a5c85b94f21fbd42d4975d5ba48625881c8a648265cfc5abfea89156a968c3657c0147155035c9fd59e331e7f6443629f43cf42cc678661a23e6d1a0a32ed2d5d680c0468e35bff91092e02e1b31b46f20e7c40c399567c40f7c56123114e1f815724fbdf1d791a517a751d857c51a38591ab362c48aa1b0816c24b33f0aaf709a484e801d25705be868fbfdcb6e52205797df97d847bf72cb3ea17a72ee342fdaaa04e30cf85a9c70905f03e250de88bcbe6794b06597fff95df94e619364e1ab4ef0e82ea63d345060c98934924956d45fd5cffef9ef0d4e8959ab3ffb9fa09b3025abd33cfba87f44b7a89380af97af0fbb38d320dd88648654b262233fc884f8cbb5e87cbb3968677dd3d2ccbf590a90f1d988aca61aa80cff514bc37b9ffc0d6590e67b4b2201ab9748451a2ee4c8c8a8f12ff995633755daa9a241db6c9ee5662705a5247db4f90a5d7b8e6f610c4cb7ecb43a9d45dbc60b68305d15512531420a6b22c16e1efdf8a1c7d3034e3ef2ab08af215079b0022850a8b34ae6182fab0ce5e69e81a74ed48b71e1530f7ffbb5d9fb15fa242c9e4de54ea1bcf53b254bb542f4ca63cdfaaf596eccfb5dc857a62035cf1b8fdc4919ee426e5e100ac671b9746323e742ee9c3b2ffa7155aa3f34f086e3b6ba2f9f73ba9998bfb802f13136789d5e4ddd5e6c3f89cca1be206bb27688783b55562d30fbbbe6691efbf702dd8b089747047ba8f538b4ed2cd1bb3efdca7bbab19e7d4a1ad167ef79d6ff2cc1bdc19aa699bd1b8136fbd232533197afda3c30253b48c737c3fe857a27cd5b0520eec1b6e50135e0196a7ef4efbc45933985d9e465bc493a3392d6152967e0aa0c727c71dc3921afee56e532dc89b4a8da30cebf16b054a20a8b387f4f8507fc3e791fa95ce1ea1e94dfdc3f230d5c71854c01c26779ee78ba43b62a904042440fba0e0ab60dcc68160211dcdcff31844ba9b9d9df240de06e50c411cf171598f7c67433372e2271b35da7b82bbd2936431614a55367a2dc46df6a0c9ef8bf5216f63e9e222a9c3e28ecb81750e1890a7d3710298c7fd8df2ebefb7b68244ebe6ee315abe5b630124b996f25dd638cb242220790a4fdc90a889c95987ac2a46da408b00a1168077fac1bbdc3d8abce2abbaccee830f2695a7cd69b6d6279dc6aebd6e4af69f3f15ab77395348ae3062e26fd76253c3ab39704593302ecba722e10f5bf424be2901b07f2ebe0a51b416856b38c257edc8b6d736af5e240411a9b242553d06aadf899bd386f0148f77737f5d3dc57ff368b8d5f704c7b2489346217aac9b5bb72d76a072aa5c276472df77eac00ead0c175fdc52c54360e1f0a9da70c17d8d7d8c5d4b4719f02047b20c4ba483f25365f7ecb24fd43c0e8d6ca0f1de197bcf328f213bd9aefea0854d2bb67101a6b3c6f0febe0e4e1f33c9c97cbff479add233bd847ab2a1bc4d30f44848d8a72f2f5ffa47281a9aa79ec4f1c01166609497f4039f905faf23fd8aeb22a505ac2dfaa8522a0176cd3c0b40ae247c819faab469c32f2271d95bcd814ef65e3262b3bdc9aeeac412091912c8dc09136bd457aa1e52feb4cf18604be2bb83caacaa65dbf96fd6283f66bc2e0d1dcfe29f15926e3995ec269459c4913d7f1f4d7544a8e1932e4bc9842b397cea3fd9725b78ac2583517a5f7de643b386a1d6ee8f18e2f7204ac0afcdd3fcf2a57f23969fb1edd23f2716453ab5e30c0c2c7e4cd76cb2e882b7bd05fedf1ef880b775e3ddaf29c06217d13aa013d66cd44474f5b1ea3ff35e1a1ad5773c57f2b4a98e176751ad17808d726edf1c1bef36e21e275b8217a01311c4698703bebdce8a83c4b02bdaa20177058d02862d53716855f172b0b5db1221d80d8700691389800c8218ef9e40a47c44a8cd08323a23e145f7fd843862a1f7b60b02399fde127d35e48f9d211f10dac3945b1466ff4b94003b43d4ee9786bf0b888e28a00c663985c455ad5b8c5c615a97d40b9436eaffc97aaf8da89194cf4da9804b3ffc3f042dccabc03b4820a8d9b302e773d7ad4d123959cddc7fc0ccd1bfe2ae150f5aa982d63a733da110220b3fde7bee5ea6bc049edf6209cbaaf5fe4ce498d9f72da5dec0a214736db81c53808cfef39e600426d321a31f2d291aedd83f77d61f002a65ff925d45f710c4ba8d7fd363cc75841178d7660eb93ee069d524228d0ddfe0bc9ef8d90f953c705d0b837733f66fcac62848b27f4099fe3955514e94aac0125a341afe7fe86a436da1bc85a0fe50a5368d93cf935541a32a42f6ec4c0c0390913a71ab567c10267268acbe76c0d25ac61e8bbebc711957f2ee3f02a33be11ba566abe87ce2ab264f6b27b2262af788de8b7073a7f3de8672d1550016e4e50f7c4b0a5a321264b3e1cf82dc18c14b3562603f5f7e04e70b6cfbcc1bfa3ca3b6608e1da177ead2cf8190c842fa07cade742f80a05f3700e64a3a968aa9fb7c66ae93a461c03361871c82a6b93a17663ce354054af6068c03e5d7abc66bddde4976824bcdc8a27ea36a6bce732b5cb0e708e50885446641d17478617cc6194b992aa12ab5384dd04525948b173e893a5e2d93fbabb1825ce9765bea926fb4bdd5bea3d77272e1587b28e97927ab68ff45181c1e5ae1cdf27518d4ee14785597eebc9def40d723e2c402096f02cb72fe11c7fccc995b698de490097c6b6c355b562f864a6650cdf81ed505745c5624a4371d281751c38f147333d66b90c5afab041af77b0ec45c60132f3fd9974a3ac62b0769df42bce40a1acef3f922ba2b4e7119f1fd507e8edfbaafc800330b45c0a3e1a4630c490e99de480fc9785f503140a2c9dcdc2cbba86b8e1e463ac184eb35e15e214d036502bf30acddd6a5792b94099f14408326bf55b6e8bf1f9e192af082d040183d996f40535d19d38285f643cd3368362664984d1142f45fdb6cc54027fa033480d333de921a3d650e5c3f092ecfa87f1979aeb06a035ade30dfc8e4b8d046e69fac0c464368514f46bb835534ba6964520292bd0288a841d0fde9a9679403edfa16044c99362bec10ab53aaa0b0c5cc2e87e9eaf01370a061dc00218e7838c9a6fabc31743644090726470e7b2816974a2dc27224e05c1c9f2654e181beb71e6405ff8a66162c15934ddb6765791525bedd1a8c836ba26ff39c86048fa5a0a9d187e6d298eecab37efc51761a8d8cdffee424d9497fc1ef9356e90fdc133d74c00b321b3cd32e5d1fa6945780eba8535f6818e47ec378f697e0ae8df438fe92457a222c418304b95c41cf9b7ea081c7f31058e0e12ba003db5d646a635dd3b77d375ad287b7ddae4b47d373e3dc6bd377f26a406138c3778c7499226d241aae85957d848815c9b6bc1f293f76f4ae1f891e4f76a211eb8c9bf7929c4a3d3fadca93e4073564057e5b1c97045a82593c2bda6b39e1244d5a754b09814eac6c875e7b715036dab5e0651fa1bec555eaabab0f65e51aed6dff71f66b5f1a998308553ca2db5702f4d4722715118f60ff9e3256ca0183d528e798816fa3543202609f3cb1aa860fd71ea54ef2a58aca0c0167d9a6cbd80d4b20d813336e9e3", &(0x7f0000000040)=""/6}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000100)=""/232, 0xe8) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0x1, 0x80000001, 0xffff9e7a, 0x80800, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) sendfile(r5, r6, 0x0, 0xd813) 02:53:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffc, 0x0, 0x5}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x80) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'batadv0\x00', {0x80000000}, 0x5}) 02:53:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 02:53:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 273.502499] overlayfs: unrecognized mount option "lhaerdir=ÕÑݪÑ_./bus" or missing value [ 273.523989] gfs2: invalid mount option: euid=00000000000000000000 [ 273.533487] gfs2: can't parse mount arguments 02:53:05 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080), 0xc, 0x0) 02:53:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x80000000, 0xd48}) [ 273.623038] kauditd_printk_skb: 31 callbacks suppressed [ 273.623052] audit: type=1804 audit(1603162385.653:273): pid=13761 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/129/bus/file0" dev="sda1" ino=15879 res=1 02:53:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x455}], 0x2, 0x0, 0x0, 0x0) 02:53:05 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dots,fmask=0']) [ 273.674624] gfs2: invalid mount option: euid=00000000000000000000 [ 273.680893] gfs2: can't parse mount arguments [ 273.716033] audit: type=1804 audit(1603162385.683:274): pid=13761 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/129/bus/file0" dev="sda1" ino=15879 res=1 02:53:05 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="6c6f7765726469723d2e01000100000000006b6469723d2e2f66696c65312c757070657264697413ea1251429ab8fdea697874663e723d2e2f66696c65307342c78c69b050311c6168a5cb62f46ffe1bc97860d6d63df4717fe99b3efd870013350fe05a6a669836fde968ebec7a887951324dae253683032660d7fbdad792fa07905bc8b4f542"]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = openat$cgroup_ro(r0, &(0x7f0000002400)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002480)={r1, &(0x7f00000002c0)="0239e5ec1a9d9894a5e61556341eed926d865f0a77e1457df22250ce76986ea053ad02a235307a52b7601ab43e3c9aaa26f3de3ec2faa89623195569747057bcac580deaa3a586cfe5faf256bc25fbdc3218ba22ae31927cc05fec41860cd0e639494b5a3663f7e7946eec8f9e53a3cbae452dadea8942441337a34423f0c5ac35c6721f1141c8a776581554c019a4e54f0ba30fb8342f0b63f6223fd6", &(0x7f0000002440)=@tcp=r2, 0x9d1c06f915467d3f}, 0x20) chdir(&(0x7f0000000380)='./bus\x00') open(&(0x7f0000000280)='./file1\x00', 0xc02c2, 0x8b) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8, 0x0, 0xfffffffffffffffc], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:05 executing program 1: add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 02:53:05 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000023c0)='vfat\x00', 0x0, 0x0, 0x0, &(0x7f0000003680), 0x0, &(0x7f0000003700)={[{@shortname_winnt='shortname=winnt'}], [{@subj_role={'subj_role', 0x3d, 'devices.deny\x00'}}]}) [ 273.905774] pic_ioport_write: 102 callbacks suppressed [ 273.905780] kvm: pic: single mode not supported [ 273.905843] kvm: pic: single mode not supported [ 273.920989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.945608] kvm: pic: single mode not supported [ 273.945665] kvm: pic: single mode not supported [ 273.952623] kvm: pic: single mode not supported [ 273.957696] kvm: pic: single mode not supported [ 273.963460] kvm: pic: single mode not supported [ 273.968575] kvm: pic: single mode not supported [ 273.974123] kvm: pic: single mode not supported [ 273.978972] kvm: pic: single mode not supported [ 273.984044] audit: type=1804 audit(1603162386.004:275): pid=13810 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/130/bus/file0" dev="sda1" ino=15840 res=1 [ 274.021365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 274.054009] audit: type=1804 audit(1603162386.004:276): pid=13810 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/130/bus/file0" dev="sda1" ino=15840 res=1 [ 274.104169] audit: type=1804 audit(1603162386.124:277): pid=13810 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/130/bus/bus/file0" dev="sda1" ino=15856 res=1 [ 274.138217] audit: type=1804 audit(1603162386.124:278): pid=13817 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/130/bus/bus/file0" dev="sda1" ino=15856 res=1 02:53:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r0, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="c09d0e7c2a958d6da4b3eea0544de55bc644051080489c297bd51909a2c563aab9eb89f979603406ca007f190ac73b98745951317132", 0x36, 0x3}], 0x20080, &(0x7f00000018c0)=ANY=[@ANYBLOB='map=acorn,map=acorn,check=relaxed,uid=', @ANYRESHEX, @ANYBLOB=',check=strict,nojoliet,rootcontext=staff_u,smackfstransmute={,smackfsfloor=mountinfo\x00,dont_measure,obj_type=,euid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC, @ANYBLOB="2c726f6f74636f6e746578743d757365725f78752c6673757569643d39323232633563612d308cc5632d636433322d346463352d6664503308313438e3890c2c3cff3c66"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"a42d3c4bba7e5bc62f69653d1b6ff66b", r3, 0x0, {0x25, 0x3}, {0x3}, 0xe980, [0x100000000, 0x5, 0x20, 0x93f0, 0x8, 0xff, 0x4, 0x9, 0x3d1d000, 0x400, 0x1, 0x1, 0x80000001, 0x1, 0x3f, 0x3]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000480)={0x0, 0x5, 0x1, [0x80000001, 0xb6, 0x633cc96a, 0x0, 0xc96], [0x8, 0x101, 0x5, 0x401, 0x7ff, 0x8, 0xc501, 0x1, 0x7, 0x100, 0x7, 0x3, 0x7fff, 0x8, 0x6, 0x100000000, 0x80000001, 0x80000000, 0x6, 0x0, 0x1f, 0x10000, 0x4, 0xfffffffffffffffd, 0x1, 0x0, 0x2d5, 0x7, 0x300000, 0x81, 0x4, 0xbd, 0x7, 0x8, 0x7fffffff, 0xe2a3, 0x5, 0x6cf, 0x2, 0x8, 0x4, 0x7fffffff, 0x7, 0x5, 0x5b, 0x2, 0x8001, 0x67, 0x9, 0x1, 0x5, 0xffffffff, 0x9, 0x20, 0xffffffff7fffffff, 0x896, 0x0, 0x6, 0x3f, 0x1, 0x80000001, 0x8, 0x9, 0x0, 0x4, 0x200, 0x5, 0xc010, 0x80000000, 0x80000001, 0x1, 0x5, 0x6, 0xffffffffffffbf61, 0x0, 0x8, 0x29, 0xffff, 0x9, 0x400, 0xf143, 0x1ff, 0x5, 0xff, 0x7ff, 0x7, 0x7, 0x8, 0x9, 0x7, 0x9d6, 0x80000000, 0x0, 0x8, 0xf8, 0x5, 0xfff, 0x5, 0x2, 0xff, 0x0, 0xab6, 0x7f, 0x3, 0x0, 0xffffffffffff8001, 0x6, 0x9, 0x1, 0x100, 0x9, 0x2, 0x8, 0x75, 0x10001, 0x48e, 0x7, 0x3, 0xffffffffffff8000, 0x8000, 0x100000000]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000008c0)={{r2}, r3, 0x10, @inherit={0x58, &(0x7f0000000300)={0x0, 0x2, 0x2, 0xaf, {0x26, 0x800, 0x0, 0x2, 0x4}, [0x9, 0x200]}}, @devid=r4}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000140)={0x0, 0x4, [0x3]}) 02:53:06 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x6480) 02:53:06 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x41e001, 0x0) 02:53:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:06 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000280)=0x80) 02:53:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, &(0x7f0000000280)={{&(0x7f00000001c0)={'Accelerator\x00', {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x3ff}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '0', 'RingRx\x00'}, {"a24463dc65568e643d3362d93ace548b07273a431b8b2916f9076e0e02f3f3ebfba355c6be468a7e4aa4b17b3c62fbc7297519108c084915fe4c74f06c73d536"}}}}}}}, 0xe1}) 02:53:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x121041) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x6c}}, 0x0) write$evdev(r0, &(0x7f0000000040), 0xbb8) 02:53:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) [ 274.549293] audit: type=1804 audit(1603162386.574:279): pid=13840 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/131/bus/file0" dev="overlay" ino=16483 res=1 02:53:06 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x119880, 0x0) [ 274.610026] overlayfs: './file0' not a directory 02:53:06 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xcc, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x4004000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:06 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:06 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000009300)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000009300)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000280)={0x18, 0x24, r1}, 0x18) [ 274.721457] audit: type=1804 audit(1603162386.664:280): pid=13855 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/131/bus/bus/file0" dev="overlay" ino=16487 res=1 02:53:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000001c0)) 02:53:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:06 executing program 1: syz_mount_image$vfat(&(0x7f00000023c0)='vfat\x00', &(0x7f0000002400)='./file0\x00', 0x0, 0x0, &(0x7f0000003680), 0x2004, &(0x7f0000003700)={[], [{@permit_directio='permit_directio'}]}) [ 274.840346] audit: type=1804 audit(1603162386.664:281): pid=13840 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/131/bus/bus/file0" dev="overlay" ino=16487 res=1 02:53:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r4, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = fcntl$dupfd(r3, 0x0, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) 02:53:06 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) [ 274.936216] overlayfs: './file0' not a directory 02:53:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x10, r0, 0x0) 02:53:07 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x40881) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus/file0\x00', 0x46) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='loweadir=./bus1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) close(r0) chdir(&(0x7f0000000380)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x18) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/31) 02:53:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 275.005617] audit: type=1804 audit(1603162386.934:282): pid=13889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir400790800/syzkaller.zRSh3L/132/bus/file0" dev="sda1" ino=15869 res=1 02:53:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x200000201], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) fcntl$setown(r0, 0x3, 0x0) 02:53:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x5eb4, 0x4, 0xa4}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:07 executing program 0: request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/urandom\x00', 0x0) 02:53:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) 02:53:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "bb6cba02b919914a5f911bcb5ceded0c7073a43ccba6e01ffd204c691b0eacb96a355fe8dff40d7c5ce08596842210c80cce14c800a1899f09d85c298f11eade9b077275566611ce5fd8841f7d114df76358636ffe79f008062c7d754fa4e9022997fb5771a7f09e4984c55193531c2a877397ccdec9f281c01cd48ef933e7656aac1f63303b651b00110ad7b1eb61e917ae901999342659e5c5ba"}, 0x9f) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:07 executing program 1: request_key(&(0x7f00000024c0)='logon\x00', &(0x7f0000002500)={'syz', 0x2}, &(0x7f0000002540)=']/+]\x00', 0xfffffffffffffff8) 02:53:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.213566] overlayfs: unrecognized mount option "loweadir=./bus1" or missing value 02:53:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) [ 275.292818] overlayfs: unrecognized mount option "loweadir=./bus1" or missing value 02:53:07 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) 02:53:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x8141) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:07 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x16) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x10200) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0xffff, 0x76c, 0x0, 0x77, 0x3, 0x10000001, 0x200}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1a, 0x13012, r0, 0x0) 02:53:07 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') 02:53:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011000100", @ANYRES32, @ANYBLOB="010000008c88010003"], 0x28}}, 0x0) 02:53:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000040)=0x1) sendfile(r4, r5, 0x0, 0xd811) 02:53:07 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2) [ 275.531151] overlayfs: './file0' not a directory 02:53:07 executing program 3: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002380)='NLBL_MGMT\x00') 02:53:07 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62758c38e9d1903218531cc2073f732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c653051bbff0b3c418901357efda52a06f865f49985ee6e3f8303e277a7795d6e8274144cacb4b61cdee987964e8679d87699ec518674367b13429e2d49a6685d8162770227bd737d8ce0e810aa39f85f0702e41700a42ec14a767d2c3323acf194c03b63e953d55f42817ec25857fdfa068a20f115f5ff0980d726fef6cb2ace8d80c890dadd54cd26c9a50888611d3c0ecc08dc52b950f5f0fd85713d61cd9a352ba2b443777d9e1fc635bcd762045eced674b73f0f9205c8958725df2de4eae6d105eeaecc3a38c802a6cd354257705cf2e404d82e2768716ce7064fb44563a219680ba39db6eb42590fc2824251dc6c3c20cd8b01d5d097b68c"]) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000340)=@bcast) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) recvfrom$unix(r2, &(0x7f0000000280)=""/12, 0xc, 0x2000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x3}, 0x6e) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) [ 275.586654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:53:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:53:07 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 02:53:07 executing program 1: request_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0, 0x0) 02:53:07 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = dup(r0) capget(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x3, 0x80, 0xfffffffe, 0x4, 0xffffa1bf, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$x25(r1, 0x0, &(0x7f00000006c0), 0x80800) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000700)) r5 = fcntl$dupfd(r3, 0x0, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd811) 02:53:07 executing program 0: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 02:53:07 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) 02:53:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.769361] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 275.803969] overlayfs: failed to resolve './file0Q»ÿ 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0xf1cdc5b9c511c737) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:07 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x16a041, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x0, {0x0, 0xfffffffe, 0xfffffffffffffffe}}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145140, 0xc0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:08 executing program 1: socket(0x1, 0x0, 0x2) 02:53:08 executing program 0: process_vm_readv(0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/77, 0x4d}], 0x1, 0x0, 0x0, 0x0) 02:53:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:08 executing program 3: add_key$keyring(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 02:53:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x14, 0x4) 02:53:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000080)='-\x00') 02:53:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000280)="71ea06817c571e6f64b9f33bb999284661816677344c2b1a27186a5a6b57e3eac78e469400ac399c3b07e7a15990163146028895ce8525c194e97697b9b6844e294b3abb9c3102c3d5dd7d78e1e25918c7ba3006032e1d7c407554254d007b75c0ca6d10baf4c3837d433fb06ff96e6feb8a6425455be200ff88ae07dae60eb365ff643c76fa5d68f1e8d0b14ec856", 0x8f}, {&(0x7f0000002400)="b41b214f557f4daad820c35d812f673d65126bc867b94e688ed111023256d90a52aed3406da6585b20466bf6dd957dd530e009d341d8710634b1936c227a5de6f71405a697e972f03b7f1f1ea3b7984f7c49ca765da30086f7cc2d4c4a559b91d3a6ae5429b502399c1167dac60d0acbde25970230382ca10b10a48712e150ac4df0d452b660f0e27c4c92b7942fd182737b6c3355acf14e1760259625716b8f1e207254796066e10f700276cc24fd4edfdb4e1e7b16bf1a5ab3f98650b97acbff7d331acf", 0xc5}, {&(0x7f0000000340)="9955dae64127ee3c717016", 0xb}, {&(0x7f0000002500)="12c89b335332ea6247c6b91bddf52c8c86241075f3c669ca62cf8e3c546cc4536de78ffdbb204ab1cccd0a07d92ce6a0c201aa53f49fa4c2367c92401cf620ed35d9870d4891af8ee360622721ddea5774586f849c1c53b8c774119184924a32c7e3359085e0172d676bcd866c153d425003d295b21eecf6270a95f97aefefd74f051b7ce9431f54e5c1eab47e6b71a96fc958bc4162db03ec4a59d7d1cbab4e574bff68e804f2a7a465e64427ec7055f435bb1ac39c70e48cb8fd3d6cdfdb1e06217c2017d2b5f75994d7b35efbf13d7574d5fb4df9cf4042e980ffcd9b75c9eccc0ef1d708", 0xe6}], 0x4}, 0x20000891) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,uppfile0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:08 executing program 1: add_key(&(0x7f00000003c0)='blacklist\x00', 0x0, 0x0, 0x0, 0x0) 02:53:08 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x46900, 0x0) 02:53:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb6, 0x0) accept$alg(r0, 0x0, 0x0) [ 276.674200] overlayfs: unrecognized mount option "uppfile0" or missing value 02:53:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='dots,fmask=00000000000000000000011,dots,dots,dots,dots,nodots']) 02:53:08 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/sockstat6\x00') [ 276.745317] overlayfs: unrecognized mount option "uppfile0" or missing value 02:53:08 executing program 3: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000080)) 02:53:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000040)={0xffffffff, 0x0, 0x0, {0xd862, 0x1ff}, 0x45d4, 0x3}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) sendfile(r4, r6, 0x0, 0xd811) 02:53:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:08 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000009680)={0x0, 0x41, "2a9d545f6eb8709a951c14df5e83b391089df54e3454abb1989dc13f9b67138e7c909d7e99e861e0ab91d07ace9203a7612ae97cb756616c84f9bf662c10c01b5e"}) 02:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x7ff}, 0x40) [ 276.946292] FAT-fs (loop1): bogus number of reserved sectors [ 276.985808] FAT-fs (loop1): Can't find a valid FAT filesystem 02:53:09 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200000, 0x0) 02:53:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000040)={0x1, 0x101, 0x10001}) sendfile(r4, r5, 0x0, 0xd811) 02:53:09 executing program 0: write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) [ 277.067638] FAT-fs (loop1): bogus number of reserved sectors [ 277.076072] FAT-fs (loop1): Can't find a valid FAT filesystem [ 277.090627] overlayfs: './file0' not a directory 02:53:09 executing program 3: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) 02:53:09 executing program 1: rt_sigaction(0x30, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000340)) 02:53:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./pperdir=./file0']) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000280)={0x21, 0x2}) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x1800, &(0x7f00000001c0)) 02:53:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000000c0)={{0x0, 0x0, 0x80}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x7, 0x4) sendfile(r4, r5, 0x0, 0xd811) 02:53:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) dup2(r0, r0) 02:53:09 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}) getpeername$netlink(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpgrp(0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002380)='NLBL_MGMT\x00') 02:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.353186] overlayfs: option "workdir=./pperdir=./file0" is useless in a non-upper mount, ignore [ 277.369890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:53:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0xfffffffffffffffe}, 0x78) 02:53:09 executing program 0: socket$inet6(0xa, 0x3, 0x82) 02:53:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x3}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xd811) 02:53:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) [ 277.435937] overlayfs: option "workdir=./pperdir=./file0" is useless in a non-upper mount, ignore [ 277.466768] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:53:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f776575732c776f726b83956e3a7360628affd50ec3066469723d2e2f66696c65312c7570701d1ce461689ab409df7e0a8c3e422b9a56ed66934abb76eb107794937c2dcba74481ca7e2f2a20b5205d081948bbdb25b749d06e3d812726deda6a7286924ad4557de525c012fd9a6abe74b9b40d3ff82d183f7104aa77926b5ec699707dd445ef1769c5e15c29e74f87e616cdca83cc02e403c94d0f41a19b3eba8a4e47d6dea22abb9ef1c409000348984e6ad2158f0000000000000000"]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) 02:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:09 executing program 1: getresgid(&(0x7f0000001440), 0x0, 0x0) 02:53:09 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 02:53:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001340)=""/146, 0x92}, {&(0x7f0000001400)=""/255, 0xff}, {&(0x7f0000001500)=""/251, 0xfb}], 0x4, 0x0) 02:53:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 277.672846] overlayfs: unrecognized mount option "loweus" or missing value 02:53:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{r2}, r3, 0x14, @unused=[0x1e, 0x3f, 0x101, 0x2], @subvolid=0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$AUDIT_TRIM(r2, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x10, 0x3f6, 0x400, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240080c1}, 0x20040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xd811) r8 = socket$caif_stream(0x25, 0x1, 0x0) fcntl$notify(r8, 0x402, 0x80000002) 02:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:53:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000f00)={&(0x7f0000000000), 0xc, &(0x7f0000000ec0)={0x0}}, 0x0) 02:53:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000002500)={0x1, 0x0, [{}]}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000002400)) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') ioctl$CHAR_RAW_SECTGET(r1, 0x1267, &(0x7f00000024c0)) read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2]) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0xc) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file2\x00', 0x8, 0x1) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb6, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) 02:53:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c72000/0x4000)=nil, &(0x7f0000c11000/0x3000)=nil, &(0x7f0000e04000/0x1000)=nil, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000e1c000/0x1000)=nil, 0x0}, 0x68) 02:53:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x121041) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x134, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x120, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x134}}, 0x0) write$evdev(r0, &(0x7f0000000040), 0xbb8) 02:53:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 02:53:10 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x80300) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x2a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x60}, 0x1, 0x0, 0x0, 0xc081}, 0x4014) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) accept$unix(r5, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xd811) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r8, &(0x7f0000000380)=""/233, 0xffbe) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) [ 277.963916] overlayfs: unrecognized mount option "" or missing value 02:53:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 02:53:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x80, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0xbb8) 02:53:10 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000009680)={0x3, 0x41, "2a9d545f6eb8709a951c14df5e83b391089df54e3454abb1989dc13f9b67138e7c909d7e99e861e0ab91d07ace9203a7612ae97cb756616c84f9bf662c10c01b5e"}) 02:53:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 278.056486] overlayfs: unrecognized mount option "" or missing value 02:53:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @broadcast}, 0x2ba, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='ip_vti0\x00', 0x0, 0x1f, 0x5}) chdir(&(0x7f0000000200)='./bus/file0\x00') ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000002400)=0xe) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r3, &(0x7f0000000380)=""/233, 0xffbe) recvmmsg(r3, &(0x7f0000006280)=[{{&(0x7f0000002440)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003800)=[{&(0x7f00000024c0)=""/126, 0x7e}, {&(0x7f0000002540)=""/7, 0x7}, {&(0x7f0000002580)=""/195, 0xc3}, {&(0x7f0000002680)=""/102, 0x66}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/193, 0xc1}], 0x6, &(0x7f0000003880)=""/224, 0xe0}, 0x6b}, {{&(0x7f0000003980)=@nfc_llcp, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a00)=""/165, 0xa5}, {&(0x7f0000003ac0)=""/195, 0xc3}, {&(0x7f0000003bc0)=""/162, 0xa2}], 0x3, &(0x7f0000003cc0)=""/127, 0x7f}, 0x6}, {{&(0x7f0000003d40), 0x80, &(0x7f00000061c0)=[{&(0x7f0000003dc0)=""/241, 0xf1}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/135, 0x87}, {&(0x7f0000004f80)=""/71, 0x47}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)}, {&(0x7f0000006040)=""/1, 0x1}, {&(0x7f0000006080)=""/85, 0x55}, {&(0x7f0000006100)=""/177, 0xb1}], 0x9}, 0x4}], 0x3, 0x22, &(0x7f0000006340)={0x0, 0x3938700}) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) [ 278.119174] FAT-fs (loop3): bogus number of reserved sectors [ 278.155810] FAT-fs (loop3): Can't find a valid FAT filesystem 02:53:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:53:10 executing program 0: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x84a00000, &(0x7f00000020c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}}) 02:53:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x50e01) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 02:53:10 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000009300)='/dev/cuse\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009340)="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", 0x2000, &(0x7f000000fac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:53:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 278.246354] FAT-fs (loop3): bogus number of reserved sectors [ 278.256780] FAT-fs (loop3): Can't find a valid FAT filesystem [ 278.304965] overlayfs: './file0' not a directory 02:53:10 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@mode={'mode'}}, {@huge_within_size='huge=within_size'}], [{@smackfsdef={'smackfsdef', 0x3d, ',^.!'}}]}) 02:53:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) chdir(&(0x7f0000000200)='./bus/file0\x00') write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14}, 0x14) chdir(&(0x7f0000000380)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r2, &(0x7f0000000380)=""/233, 0xffbe) getsockname(r2, &(0x7f0000000300)=@generic, &(0x7f0000002400)=0x80) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 02:53:10 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/77, 0x4d}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000240)=""/108, 0x6c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/187, 0xbb}, {0x0}], 0x3, 0x0) 02:53:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xca80, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x44081}, 0x44010) sendfile(r2, r3, 0x0, 0xd811) 02:53:10 executing program 1: getresgid(&(0x7f0000002380), &(0x7f00000023c0), 0x0) [ 278.470468] tmpfs: Bad mount option smackfsdef 02:53:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 278.504494] tmpfs: Bad mount option smackfsdef 02:53:10 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200000, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 02:53:10 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 02:53:10 executing program 1: r0 = gettid() wait4(r0, 0x0, 0x0, &(0x7f0000000000)) 02:53:10 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) [ 278.651130] overlayfs: './file0' not a directory 02:53:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) s