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", 0x1000}, {&(0x7f0000005040)}], 0x6, &(0x7f0000005100)={0xb8, 0x116, 0x3, "d8f3f6dafab92eaba5dcb23f3a66b18ffd7bdca6b3ccdb85c8b953c499feeb2dc4ea7cc46efa1012208cbbab816109f43ada92343a740dfc5c1fc5888d8a2682af6e6dfbc236efd943736184453efdd542495f5f28408f1cbb2a9e0ad89a3b93c1df3d99869d8b9e513371b0dc79b6a00387c63822b0e1a66a15f23ea13c1d346ae5bd101e0b5333693c370511cd0cc37fa19973fe88fdf79051cd9b1d9aa9af0619"}, 0xb8, 0x20008000}, {&(0x7f00000051c0)={0x27, 0x1, 0x0, 0x0, 0x8000, 0x7, "149286ae3fab3905a7e5897c23cf87dafb8fd88b09cdc01dfc4b55ffaff2b73c90f93f2948736f807f545a42bc608c42b30be1fe45771b0247642c9b51226e", 0x14}, 0x60, &(0x7f0000006300)=[{&(0x7f0000005240)="ce3dd9a39da963759771679ff256064d522b17a15998333582ac40dbe522e71d1db8d5f333b6ba837793cd6c1317217c1b5dbd6b3f09fe9a3963155fb69919857050947321fcb1b1b0d95d9af1e7a0f143efbd037fbe28b3f318a0b50f8f14e4c48ac97f8488aa9a10595224321a98214cc86fdb21bb1ba88b251e3c9f41c087613c886f0c89ee154774b088de25cffb104fa3be590ac909836c2ece7d112745cc", 0xa1}, {&(0x7f0000005300)="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", 0x1000}], 0x2, &(0x7f0000006340)={0xa0, 0x11f, 0xfffffffffffffbff, "d92f5cdff70cf73c423256b70b4f33ce2c6802951032eb55de706c20f78f5040853cc5957ff8ffbab9e924886b643c5afaedb41c9558fe58cbc8a163ff1fbf0ba414f1bfdbf0e9c1cc27668a985ae98fa1291a169f4977ebb89e89150579735d5809f0ab8bc5a2d223a125301eeaca1e9cb3b4e14448007caaa12956f8cf178f08cb770bb6c7d7b1dd3766e9e4"}, 0xa0, 0x80}, {&(0x7f0000006400)={0x27, 0x0, 0x0, 0x7, 0x2, 0x2, "65cdcb5dc727a8f9ba25749013496db4354a990701bd75f73706daa0d19a71e8ae221265cf5e95e7ace7587b2f92d69bb398b2afa095c412a41061be8cbd58", 0x30}, 0x60, &(0x7f0000006640)=[{&(0x7f0000006480)="8964ba93a302353359c82049ab1762082ef263f48b27d17449c5ec8d6437eaaafde00942e6799fb1f931e7987c8661393b95a1932f66549671e09f790e17223b9f2bd281e7ec983c0134da8bc01bf8dfe0c7e760b5fecc34dd705e556866044f3d1ae51ca75572b78761f0f2f6ea39110da3cec8b72a37b90b6ed9a3da417f4579b00b14251298e0766fa0ea2f8b0f976e5183d0de47f9c284329480000dc66f3b6d8d20af2cb0d26d87977c429202475080a206539b79948ad1ca2e2e692c5209f262aabd134b9e439f8aee82834452d5ce", 0xd2}, {&(0x7f0000006580)="b0cdd72a2f8aeba82bdf5cc38178b98e1353db48d1a2ff2540b1fd07a154b165b303ce7548acff77dba58cb573a71d5d635d8ea769b90cac65658e732920d89312972a529985dcc4b8c97d9741c18f23d815aa0cf0dc0ba0b3f9637f04b96cf6d3", 0x61}, {&(0x7f0000006600)}], 0x3, &(0x7f0000006680)={0x90, 0x13a, 0xc3de, "393ba4b5f86fea0e562f17a2ced8c51096fe19994b55bfd8d4de9cf83122ece8c0922394cf07e44e4dd07186c6ded77ef040337c26ffa68d9bcd8371145b4176d215fed42e34620e09096cf0db3a43768e60f6d49f01564a426d92ab6f5f4c1c8d7d10a137e185dbb6040c68cb3ae873000bda9a9bf2f2db4545d9773d9f"}, 0x90, 0x20000000}], 0x7, 0x20000000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xfffffffffffff638}, &(0x7f00000001c0)=0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x420440, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x100}, 0x8, 0x8, 0x8}) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) uname(&(0x7f0000000480)=""/24) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000000000), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5c037dc1250300000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) [ 282.401572] overlayfs: unrecognized mount option "xino=on\" or missing value 12:39:56 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x5, 0x6, 0x10000, 0x0, 0x89, 0x420, 0x2, 0x2, 0xfffffffffffffffa, 0x0, 0x401, 0x6, 0x81, 0xfff, 0x7, 0x7, 0xffffffff, 0x8, 0x8, 0x8, 0x8, 0x0, 0x3, 0xd9, 0x2, 0x80000001, 0x0, 0x7, 0x101, 0x1f, 0x8000, 0x6, 0x2, 0x81, 0x5, 0x0, 0xfffffffffffffff8, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0x7, 0x101, 0x0, 0x0, 0x8}, r0, 0x9, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000003c0)) sendfile(r4, r4, &(0x7f0000000000), 0x60) read(r4, &(0x7f00000002c0)=""/194, 0xc2) 12:39:56 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000003c0)={@local}, &(0x7f0000000400)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @rand_addr, @remote}, &(0x7f00000005c0)=0xc) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xd3c1, 0x440000) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000001c0)=""/121) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt(r0, 0x107, 0x4, &(0x7f0000001000), 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="2b000d3f64440180c2000000810000000800450000580000000000009078ac1414aaac1414aa3420880b0000000000000800000086dd000022eb00000000200000000200000000000000000001000800655800000000000000000000000000d91c000000805776b9e7ff1d9c1cba000000000000"], &(0x7f0000000000)) [ 282.502158] audit: type=1804 audit(1539607196.458:44): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir141344441/syzkaller.9Yl0af/65/bus" dev="sda1" ino=16544 res=1 12:39:56 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000200)="1c53261cde33459298603989dcc4e598f399a436ff1bb1c32adc6f4fa76b7f3c00879ba22dcc79b1a351249b1e1f2cd70e1e511d32abba7ed20426850425d56196002185ed7937d260a18b30b2040a7bea52ce4a92e66256d5048b1b9aec138d", 0x60, 0x4}], 0x1200000, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)="7374617409c0d2febcf9df2deac8c1c035171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xfff) fallocate(r0, 0x0, 0x0, 0x10001) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xf82a, 0x7ff}) preadv(r2, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f0000000180)=""/152, 0x98}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x2}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x15, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000015c0)=0x0) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000001640)={{}, {r4, r5+10000000}}, &(0x7f0000001680)) 12:39:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x1, 0x3, 0x1, r0}) r1 = getpid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000240)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r1, r2, r3}, 0xc) [ 282.662138] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 12:39:56 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffb, 0xc0000) ioctl$KVM_NMI(r0, 0xae9a) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x400000, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x22, &(0x7f0000000200)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @rand_addr}}, 0x118) [ 282.775343] overlayfs: unrecognized mount option "xino=on\" or missing value 12:39:56 executing program 5: r0 = socket$inet6(0xa, 0x1020000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x201}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '-%{'}], 0xa, "af5dced975e9bb2b8437a024de813d78aefc275e6a729b1355a04ad08cb6658964ef7fefe3a188a7733ff39cc4631be38b391ab7511ea5733f3169e3ead4d09557b24c8a5369acc522bc8b259096a28782d4a5a1f9314cd627a1e55a41157ca27a4722cc60066d6c7ae7d87524c90d3fcce7ee91334a1138bf10bf176dc794b562954821ca34d707853be0f0e12d2010cd5f3590f0f5052ddd6e1d024f7cefb380c93daaf76b5edf4cd0ab71f5e414f074fb6af75d5a7e1f529bd965f7f514aba995c1a4fc701030490d9d4c96d5cc1096913f626076bf482be496269f2d8d21bc"}, 0xf0) recvmsg(r1, &(0x7f0000000d80)={&(0x7f0000000640)=@nfc_llcp, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000d40)=""/34, 0x22}, 0x0) 12:39:56 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000001bc0)='./file0\x00', 0x200, 0x100) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000001c00)=0xac) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000500)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000100)=0x2000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg(r3, &(0x7f00000000c0)={&(0x7f0000000480)=@in6={0xa, 0x4e22, 0xad70, @dev={0xfe, 0x80, [], 0x13}, 0x1000}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000018c0)="630d9c36f4a6c2da5747aa61950703ad592bf58f8fd28ed7ca4c296fec121d49863e5592e6b8776b9255e0a4a8fb1e669a9b3cfcffc7187db4136e31d82a7be45339b5134dd14241250b98caad7c4fe93a5eb63c8944df8a2314e7903a955be341399dcad83e12b9c437ef56782bcc58903d5fa79b2c075169587ef48b09035c095ffa04c8bc406c82c14f921715425f8618c9a596c9a2e51691cd34a75e114607aafdd6ab88dff8b212b38e85beeb05ec7b585872a501557b3b8c5351a4ce0ca10fc87345af1febead0de65344fe335dd965daf57c1c3907b437e43aedb59", 0xdf}], 0x1, &(0x7f0000001c40)=[{0x1010, 0x11, 0x43f5, "f66a735fcdae398f7f49cfa684c0b35ac79159dc91d0f6817d7bd733bc8e8acad9c7e803b246c319cd549688e19e19da8298ae87bd065c6dd4b77f31e5abb493964ae4c57cb9f5dd443b81347aa6ca889d6287a1c3f6472c4bc538b59cee52625700fea9d17ddbbce5332f3997e4056ed79ab3418d130e1875cbfadcbf2eb8ccc6e8b9f03b0fcfdbb546eba99886af0870bd054b5b4377bf286f1df129f04f52e0402c65c389528c21d4dc6fa24e24b0532fa126b03359e2effcfce590b0e494b49e71cf66532a954dce619254a81a6be7468442343796b750e77cae2d455c0d8c3b83616626a8c0614b92576625ac0c236c8fa07ddd1735c204ba8c1659ccbe6c8f9a1dc8c78d4a03b05944fef39f7cf5b5a01105980cac8b94cf46b6e6d708b67a8f439b76531f78a81c206e982cdd8ee2704c0c48229bfefa1197de93ec00eea863c4f7129cd657dfdf57f0a656fcd38cc905c625a5ce7d3dbee583c667f82bbfcd06241ec6cb5c56a70f4c6847f2a460c8dd73e923ea70d3356946d62fa9769c7e635651873091a4034d665d3673defd8ca899efe41e4acc770b36ca912bd79a15693da6ea94fbc0a671a84f4b51897293f52d113ead91df866c3b5a127192527c8f2930de78617dd2f03fa53a4208c54e5e8a5a7736ea9b83a708be4dff3220e80382030a8da975b8dcc0207e010ceaada45a7453f193cc90d71c1d7314f008b04037103afb1b6535e557e068d4669910d7b590e0b54d84bffab46c043a7858f12495095b6d6a4ebc28276b1ba0e6168b39b0cf844d0d0101a0bdb24753bc0f75639262a4f206a6da8dcd3f5124d948e0b00fc2d39f5542eb02aa5d1f4c6746ec96b4ffb524174ce442a636212f89849c5fd61b9f4347348a649dd73220b98d647a243603f13e065b16075fb1b14225243c6ab3be5ce810d6e8f91af0ccbdc2c309628fcd285acc01f1b100532e8e5f3bd85f85d3365a3475435ffab1a251881c647308ce23e1c0191e5140c8e90c469309a2384954435c5a921ff772002bc2b6896d5a362c7cd6451b2db7c7bdbc376c4347fac233fdc667e1cd0f725e42384f712dac0174c5703b322641cdc644922e607491f32af7174ac5953c751d73d868772ae0252d83af1713a2cfd8ec81fd9b265b2cc1ab55e7fdea6d8479a8dc6a77f2605990e5989f5968c56abe6ac04caff241aa9766f6c032f1e69afdbdb47465a9789d0dd74fae87e9f549da14020758f12fc0ac41b9e6929b287d3ed8aa18c838d62a3a18eb6454f8fccab5c00329d970c346d101eb509d39aaf360a059a5ea1b4e078a163bc867c78f4f17c35986c88a2e075d4b6518b284b719f87eee5c6660f625512f8d0244c2aba6ec56031a658f4e97f23ef7162a5ff580ea3e868baae95b2a69daf947a9c0f0556b51feb86b5079517981f9f3e17be6bfe39f57d2a0a9ea318fbef3a4370f301860fbd1d62e7d836b5a93544cdd778d38b36018c0215891520955a7ca08896bcf7f7ee2c236f3d2a21610c907561fd2efcf0a0d69011d2a66ba6b210dc3bd0aeb8586928a0ed266b34a23b228767685387faf72718ce7037ba6b3cb2ba68ad24f6e6457c54b1b3a58525a5b0fa93b56fa84536cf42ceefb8a2e178f760fba07441e25ee355279075a77481aed0412ab441d72d0788d6cd26738d7a7c5dd6b79fb183ae93a55f9de21a6df5827cb1124ae9c7e0a451d7c8ae32c7497495b58bad94881038bbb3c7b966898631767e19adec7a5e4679589c651883145522d31bfa6312d64aac7149d1a8652ebcf2fa2dae0222813c2c1cddf477ad34dfae4937b39ee71ff93aa002fbd67e9f369e7970ae2bbb283ed3aa285518f3b546d6a2eb85522bfa7abcac491dba74db1015d2781ddd0aa40994ba44e08cf92e70e2284d799ad8c4279ad4818ed99b83188ee90cd7c4ac8bfe2fc3c7e67270f94ee5b9cb753ffc441a1d10078f7a59ecb15f13bc6476ce23cbf3c75fb5f86d60a73224b0b2ee60550081a881abd3683fe8d607d3e80ecfa906628b2d297400fe77355ca7c6aaedebe7f6bce176ace2f98dab7c40577b9ccae4fe4cd96ebf8f68edf10c05bffc29f8562374c3d3624e65b2ae583d5f9b1f29acbc39267b6af54fcb71064ac4f9fcacfbdd858cf98527381e38cd72520478bd24ec6161b2730c11b5296bef2f2a47bafdc4cefd53d92e0ecff7f9cac74b8dcce65f3a12580ecf4eb372c933ef638bfcce97c8839789086527ecd60aea394a94b519525eefab5a0945ac24d7dec2ece62ace9c5f6c78ac885c98a0943ba39055ee3239779a7ac8c5c69981fa92d781c9eed607fa8d9fb7b5b7165e8d56ab4178463fa6353824c4d68d39f5c0b45c54fa473b30f1812704fdd6093f53bda38f36e512645eed4285890c24a6b69c4067f849e388e661cbbf2385deadb03fc1a214f4a676f4abd1d9a5a3f64891374db1091fa6b1e26e9465405371b67bbdf522f93b25032d66b4eb45c6be4ecc8f31ea028ec44caecdffeca4101cabba8c9c16f425c2aabbf0870fa395f4e05d33d5a30c62848a437c10689e9e664bb6c8f70afc1cc59d6d302b22a2a47573975f5f6bb678aa26f388e18500c5319c672059c1d27617242dac1aad5d97faf8d06e0d0f8531265323f744da070c4fd9c2e9f154290237ac90c709bd7c36a5c0643312c389908e35255e1909ff54400a20265e0fc09d98fe5d138154fe9c69f1e3df82a5bc34f278b3efbcffe4fc5fb203adcf006e8ef180117e7a4575effe46a8fe9667a6c1c993e32878c59e07f5318e8b48cc56280dab7f68d2b4fe094faa12e02c05cc3214be067ef5be8b04c7b2bd1805618d0ce6f667dacbf50c828832795a1e5a237ae3a6bef0dee4d41bde8226cb4edaf06509f16612defe53e96cc462656a880efae2b41158d3708d4f023547c8d0a087faaf6de9030b79469faa7c0ba2f2ef611f818960df8e80d540fcb2d3226e790872a1c0925e7e215081cb7c51611cf6cdaffb942da2c342bb86557d5ad4d6ca2471928815a703668f30683ef8ed21ac41edc134f069e5087d74206097afb0efa9d8daa08d242d67cd721d83f993b25ade68662c95e61be67cdb7264ec1d2a175ac58751586f39b64581113780d69aa53b2d2b50ec9a2af2a20e8092825c8eec45e90b413e5de13e9c3799ffc4660d02ab3c2008390f10986c1457cd00ce21a45bfbd849f62b33dc4bc4fa9867196cffa8c84dd8878eefc9cb15b1dbf01ce9554f35df3284018657f0f8c2851e67333724d3fde05331d1f27432871cf434078f8cb561d75fe33289248397937c8589e9c02eac81cc8d685bdcc8461629f0c5ec1a8622aef015bac457939fb932051c7107dcbf409e823b22316d2d85f8fd88112c905aa794a4a266d8b076b2a12087e32cb8fbe604361f91f4e58c2f07eff82db9178b3e752b8c87ace2f7b7bfe71b775853ffce297eb92e2d0f0e84a4436584c0e58c93c8a083798e77d452c2f91caf588128bb58ad4940b2956ae411722ac3b772c9bc17f647973947def4c5a510188cd41e209f4767e092dc41ca162265dd90343a8d2bba640f24c6163bac8373ddd94e749c29a32b28d8ab770e363619cb8eaa485f56f1d455b9c96c6ada8674902708d9b26afcd7146ff62a41005733895f328f6d5935e6cffbb3ec9a0d1039c3b19163684655a1cd8dec3644bb71e706e6b725146c987274de54fabf60484af9570e3cd1afcefa9ee02615c67470e00ce601de25636d708f0bae219feb6385870c0f447bf078253fa5eae5be7b71d11fdddc16e4e91fbf56219f6187d1facf594d3aa0ec0df3bc61d8a9a5caea2e6023ea0a14921ca79019afe87b6fe5b14a3334bc89ba368bf34effe3f52f27a9b34120eb193e525c13c8812ac453d1432e7cb178a7ba160d0ec51b59b876a47694c9e157749b54bcbf3562b0503b6dc88d34360650c06337a0e0daa72af258c6aadea3509fdd0b636960b9e9d2f7d4d0db44e8a9fb24e971f476644a5beeb75972ca79224a08105c3b635bf9e5fea71d69deb57f4ab87c69de52d45380ed682eb485cf99eb59938a21ed827874ad6e18718fcf348faca34c624d8a9030fadc499d8a3f2630b0e32626fb87b2bb342da7b804e0d3f23157456ff4c182cb25c3f2e3023c7de6945f32f149b34d8e6233f56b914e8a5de362416b8c2e77b58b88a7d6e9ef6fe9a0f1c8c804056852d7c0069f6800a95aa32447c9d176dd6e646d6dd276c38f541e6ee8e2dbff6696964fbf9ceffa1cc11d6461ee18be0d59cc33c960d7843ca71ce5a294bba80311685dbffded1de115ae1a1ddadc346145047ed35d4e29c29a1970f6a12f58aef9fdfb6575f35fcc0bf87a54b42c0614cde469ff9482b7a256132b31192dce433f1193d761ff9e8752d95f783cce3f9dc40c211cfafa02fffc6672d0790328fa9f2d70ec0c8dd43436150cbea2fa88f976bad377d3f02a0783e6ae77a21c16f6fb0b7140d9b49308d8abbdba4a86e1b203bb9b6131174770414b774e056bb8ae2cc8460db6a493afe62cea00f07f35e99239d41b0c524863aeca8bd4c649e1292715c3d3912de81c41996ffc57a83a1b2ed758a0137569decece10a4d6c58fa86d59d7e2f4de8607fb5486842898b6d515121820cf6abc10f1aa2d13c81fa81f852bb70322ae122518a51092147d554dcdfb96bdd3e7f732832255aa278ac4afd12ab5c90681faa38cc0956435a1034dce21a7beb696ee790a6e449e1d3556ca689f27886c460b6f6c7c1029f6247786b9d398289153571322b7960ebd9f8e9fc921d4ae5120f053b06fae13c143aa53ece7f42bbaafee74014178662f5ce45bf14b8baecccc9a253c7d6892fe166662e5b254f41b52d6dd10e8f7e91d9680d7b0bad8f53ff6868238cdb545a0e9bf399b84f70a93864e8f0979b71bee72f7ba96f04245aadb86d8104206fe2250da1214036f615dc04428cd24cf96e7ef6ae55f5c8f00b504596c10260370a998585ace314cbae5214c6cac5a9787ddebe63547591773b20df51a0463fb98aff6875dab0dc38dfd021e0bc60a7dd8a619e5a8258e022615d48141e5a76a2f8bae6823143e98883fca015ec1ebb98830250799e41dd1349eb0b3bf867ec032a6cb42a096ac68986fe072b28c521eb4d5ae2788ef17939615bf346cc13cc570eaf200c39437f521ec7af38a6d21564f4319f29451e85d6a2f1a7bfa6c8b963c822571b2306b3b1031847ee03867be71b0cc5995847989c6f3a9da29b6606134b75d2444e3e1c7c3ff32e682f8abae2e48c9d45e670c71038867ba849406386a06677c6e656a782645d4d31acecec9b91a3947d51d95544915f0d92cc47adf0a1dd9a16ea0eabdb0180c749aa7876418dc52467523043f036f88c12299865b87f713d5786f1b6413c60a7193d49048c1d2811fbe737ed164bbe52e6fa53606c580d035047f7e3e15ab8fb3500ff65c40f50b56c58cec218d66b5c20cb3587fe220e70a2cbc0c3e90af5ad1b569b39298525eeac7dc4dbf8b4682158b679ce433223afbf58485c5677e0cf1c78f16e6fcfbafa1e1fe5a00fba3e72e805b02958bf04667c0b6099704010d838658b119b361d8ffda5167f3a7563ce3db6c5891a4a6284313792ca22b1a4accfce14c7f2ed435fced76b88028f4ff96a6f296cf6f71e32dc1465b282bb376ebcbd61c6c57c6fac37db9f11934e2dffa1f982751c7cf70ac2d8772896f9bfcddea15bc63fca0aeb1521979effdb6ae8ebd586ccd04f29b9bd20a1a0ed289be0"}], 0x1010, 0xc010}, 0x804) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r5, r6) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./file0\x00', r7, &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) dup(r2) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) write$P9_RLERROR(r8, &(0x7f0000000600)=ANY=[], 0x0) 12:39:56 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000200)="1c53261cde33459298603989dcc4e598f399a436ff1bb1c32adc6f4fa76b7f3c00879ba22dcc79b1a351249b1e1f2cd70e1e511d32abba7ed20426850425d56196002185ed7937d260a18b30b2040a7bea52ce4a92e66256d5048b1b9aec138d", 0x60, 0x4}], 0x1200000, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:56 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r4, &(0x7f00000001c0), 0x6) [ 283.004601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.056581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.079362] overlayfs: unrecognized mount option "xino=on\" or missing value [ 283.134198] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! [ 283.144244] device nr0 entered promiscuous mode [ 283.286764] audit: type=1804 audit(1539607197.238:45): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir141344441/syzkaller.9Yl0af/65/bus" dev="sda1" ino=16544 res=1 [ 283.313451] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 283.357237] audit: type=1804 audit(1539607197.308:46): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir141344441/syzkaller.9Yl0af/65/bus" dev="sda1" ino=16544 res=1 12:39:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x14000055}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5) 12:39:57 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r4, &(0x7f00000001c0), 0x6) 12:39:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000692000/0x4000)=nil) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) munlockall() 12:39:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x8042) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6d31, 0x2000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xd7, &(0x7f00000000c0)="f749deb875d5eba2c0789688355a6e24c18fa662c58f4d7d75f6c01a3f723e842a3579b795c14de568397df7f463ef44e2", 0x31) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x7ffffc, 0x0, &(0x7f0000ffd000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 12:39:57 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000200)="1c53261cde33459298603989dcc4e598f399a436ff1bb1c32adc6f4fa76b7f3c00879ba22dcc79b1a351249b1e1f2cd70e1e511d32abba7ed20426850425d56196002185ed7937d260a18b30b2040a7bea52ce4a92e66256d5048b1b9aec138d", 0x60, 0x4}], 0x1200000, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>', r1}}, {@audit='audit'}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:57 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="1d", 0x1) write(r1, &(0x7f0000000200)="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", 0x1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000140)={0xe, 0x9, 0x3}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e20, @loopback}}) splice(r0, 0x0, r2, 0x0, 0x20000000003, 0x0) 12:39:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xbe6, 0x101000) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x16c, 0x4, 0x4, 0x801, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@generic="e4205cf7d18b1998731c135236318e276d856c72c0e0b34a6b040072a59a48ce5151f98ba173f61c73cc8f77064f4eee1f08d84e88f3d2a0d5f4f31ab3d19c92a5abd20c1b92dfcf412e1a910f571eab3be0755e67ee8b96a8d5560939dd239ffe3cab50aa94630c30", @generic="d913c676ff0373334eb7da819f5443ccb3731c21ce31ffa067a9e21719e7a74fb69d9429233983a004372db2dea629ba19a3cf53a3e24a720eaf55180e6fab2d210a5ef0d01f1e177391b378848343e9b9aaec5378e08e586c07894731bb4faad888f2782c7a33aff8e3d307f90cb9a03c57451fdd6f1530bb2906b3371ea7649f7eaf96f46aeb7fd9484632978b428b9624fe22b55c1768a4abb408a3c98103c3547c857a1cdf6cb7e9f9e12d287fa89b57fcc3ff750ba853b0c1e06b7cd260a7358b3ed47e2e68a9a3c2730b274c58b5b147ba4cff55a8fafae8b6b5c569ef84aa2ef611c5fe6ee58189d5e3"]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$KDENABIO(r2, 0x4b36) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) memfd_create(&(0x7f00000002c0)="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", 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x4c080}, 0x0) 12:39:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f000000bc40)=@xdp, 0x80, &(0x7f000000bf00), 0x0, &(0x7f00000001c0)=""/238, 0x460}}], 0x1, 0x2, &(0x7f000000fe00)) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001070000000000000000030000f0fd6500"], 0x14}}, 0x0) [ 283.703868] overlayfs: unrecognized mount option "xino=on\" or missing value 12:39:57 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:58 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$void(r0, 0xc0045c79) openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x50900, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000240)=@v2={0x5, 0x0, 0xf, 0x7f, 0x5e, "a342a90b6b0e46d02951f228e348dbd0d23a5ec98d5c4aa57c39a5a6f89ba064bb8d613e9881555883faa640fce518dda1a752fbfcaf681952581db3bb5f6c93aca69b67401291c5fd944814373dcdd4812d88c18ccb148752a41ddb8279"}, 0x68, 0x2) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x6, [0x5, 0xd90, 0x7, 0x9, 0x2, 0xfffffffffffffffb]}, 0x10) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:39:58 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x666, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) dup3(r0, r1, 0x80000) 12:39:58 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x14000055}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5) 12:39:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000840)={@remote, 0x59, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f0000000740)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={"626f00007f3000", r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x200000000000000, 0x30c, 0x0, 0x5002, 0xe003, 0x33c, 0x7102, 0x0, 0x3603, 0x252, 0x8]}, 0x75, r2}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x1c0270, r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="210000004dc3bff6a3d819d4caffffff7f9af97288ee0bb983881a4d5271b477752b2332869f8df76ac8a5cffba513d97cc2d108efcf86a162af492933a098524f"], &(0x7f0000000880)=0x1) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000340)={0x1000000000000000, 0x202, 0xff, 0x8}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000940)={0x0, 0xd7, "f88a1fef54d3c17a28807195d4873f9e7d142405448fb5171e378fd353b80bbf1524d357e04878802d7b60355082e270cce8228613cc0935db08c216d38b9357cc7d4912b6a7abe9c927f6763e34e31d343ceed355948a395c0751cfe2eef3a01d66c01a8e345bffbd0f708951eacf2f968eb1fbdd3107466afeb7beead98b8ecd80da7da9dcc905a555d5a1a053f38304704a12e08d527e7cc783e507a3702bdfd49d766265ecffb14fdda2a3bd38ecd68e806ceaa61b8d2a98c867a5eeedc5935857a80ba875c9110cb30af7d8a50c1b9d3216e40029"}, &(0x7f0000000a40)=0xdf) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000a80)=@sack_info={r5, 0x8001, 0x4}, 0x72) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r4, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000540)={0x4, 0x5, 0x3, 0x5, 0x100, 0x81}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\b\x00'], &(0x7f00000005c0)=0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) mq_open(&(0x7f0000000000)="2e1f05", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400080, 0x0) getresgid(&(0x7f0000000b00), &(0x7f00000001c0), &(0x7f0000000900)) 12:39:59 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x10) r1 = dup2(r0, r0) write$P9_RXATTRWALK(r1, &(0x7f00000001c0)={0xf}, 0xf) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000700), 0x1000) recvmmsg(r0, &(0x7f0000006400)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/121, 0x2c4}], 0x1, &(0x7f0000000200)=""/190, 0xbe}}], 0x1, 0x0, &(0x7f0000006540)) 12:39:59 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f000000bc40)=@xdp, 0x80, &(0x7f000000bf00), 0x0, &(0x7f00000001c0)=""/238, 0x460}}], 0x1, 0x2, &(0x7f000000fe00)) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001070000000000000000030000f0fd6500"], 0x14}}, 0x0) 12:39:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x200000401) ioctl$KDMKTONE(r2, 0x4b30, 0x1) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000640)=@nfc_llcp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/27, 0x1b}], 0x1, &(0x7f00000006c0)=""/123, 0x7b, 0x2}, 0x0) r3 = dup(r0) bind$bt_hci(r3, &(0x7f0000000100), 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000018c0)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, {&(0x7f0000001840)=""/46, 0x2e}, &(0x7f0000001880), 0x3}, 0xa0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0xc) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f0000000380)=""/201, 0xc9}], 0x3, &(0x7f00000004c0)=""/136, 0x88, 0x2f21}, 0x40000000) getsockopt$inet6_buf(r3, 0x29, 0x3f, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0xfffffffffffffffe, 0x4, 0x1, 0x4, 0x3, 0x8000, 0xaa, 0x76, 0x93a6, 0x8, 0x2b}, 0xb) process_vm_writev(r4, &(0x7f0000001f40)=[{&(0x7f0000001980)=""/218, 0xda}, {&(0x7f0000001a80)=""/15, 0xf}, {&(0x7f0000001ac0)=""/191, 0xbf}, {&(0x7f0000001b80)=""/174, 0xae}, {&(0x7f0000001c40)=""/156, 0x9c}, {&(0x7f0000001d00)=""/36, 0x24}, {&(0x7f0000001d40)=""/176, 0xb0}, {&(0x7f0000001e00)=""/97, 0x61}, {&(0x7f0000001e80)=""/130, 0x82}], 0x9, &(0x7f0000004280)=[{&(0x7f0000002000)=""/81, 0x51}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/7, 0x7}, {&(0x7f00000030c0)=""/18, 0x12}, {&(0x7f0000003100)=""/159, 0x9f}, {&(0x7f00000031c0)=""/31, 0x1f}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/87, 0x57}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000017c0)={0xe9, 0x7, 0x4, 0xfffffffffffffffd, 0x100000001, 0x4}) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000004380)={@mcast2, 0x0}, &(0x7f00000043c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004400)={'gretap0\x00', r6}) ioctl$BINDER_WRITE_READ(r0, 0x400448e6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000017c0), 0xffffffffffffffa6, 0x0, &(0x7f0000000180)}) 12:39:59 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0x2, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000300000000000000000073797a5f74756e000000000000000000626a004700000000000000000000000076657468305f746f5f7465616d000000766574683000000000000000000000000180c20000000000000000000000000000000000000000000000a8020000a8020000f80200006270660000000000000000000000000000000000000000000000000000000001100200000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x400) 12:39:59 executing program 3: syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x0, 0x80000) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000200)="1c53261cde33459298603989dcc4e598f399a436ff1bb1c32adc6f4fa76b7f3c00879ba22dcc79b1a351249b1e1f2cd70e1e511d32abba7ed20426850425d56196002185ed7937d260a18b30b2040a7bea52ce4a92e66256d5048b1b9aec138d", 0x60, 0x4}], 0x1200000, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>'}}, {@audit='audit'}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:39:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) mq_unlink(&(0x7f0000000000)='ppp1vmnet0GPL:]\x00') ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x14ae) vmsplice(r4, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) madvise(&(0x7f0000a5f000/0x1000)=nil, 0x1000, 0xc) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x3) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x0, 0xfff, 0x1, 0x20}]}, 0x10) 12:39:59 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x0, 0x880) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5, 0x99, "5c19cecec9311e4168f3bb141c3fab0f7127cafae4df308beb51fc6b0a6b5b953a5cb70d84db7d84073d5914ecc3557a7ea8809b8c17cb254089b6cff2481abf60db979607fdaca7a4c229f10b7cfcbc56a4e0716616cba4613823237c76ad60162dc5a1d289ee314a64b2f856367ddb30c9f4f3ad936f356f36ed40333cecd55f80b4458e30f6da74b9f3e04726719fda65dea4da371ed032"}, &(0x7f0000000300)=0xa1) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000140)={{0xbf, @empty, 0x4e21, 0x4, 'rr\x00', 0x32, 0xffffffffffffffc1, 0x63}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e24, 0x0, 0x81, 0x4, 0x200}}, 0x44) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000017740)={0xc8, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 12:39:59 executing program 4: recvmsg(0xffffffffffffff9c, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x40, &(0x7f0000000000), 0x0, &(0x7f00000011c0)=""/107, 0x6b}, 0x8cf323adf9c407eb) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback}, 0x3, 0x4, 0x1, 0x2}}, {&(0x7f0000000100)=""/230, 0xe6}, &(0x7f0000000040), 0x18}, 0xa0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @multicast1}, 0x10) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x4, &(0x7f0000000500)=""/212, 0xd4, 0x80000001}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000d80)={0x0, 0x0}) getresuid(&(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40)) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000007180)={0x0, 0x0}) stat(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005640)='./file0\x00', &(0x7f0000005680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005700)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@broadcast}}, &(0x7f0000005800)=0xe8) getgroups(0x1, &(0x7f0000005840)=[0x0]) r12 = gettid() lstat(&(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000059c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005a00)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005b00)=0xe8) r17 = getegid() r18 = getpid() r19 = getuid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f00000071c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000007240)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000007340)=0xe8) getgroups(0x5, &(0x7f0000007380)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000007400)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f00000073c0)="f42f2100", 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007440)={0x0, 0x0}, &(0x7f0000007480)=0xc) getresgid(&(0x7f00000074c0), &(0x7f0000007500)=0x0, &(0x7f0000007540)) sendmmsg$unix(r0, &(0x7f0000007680)=[{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000003240)="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", 0x1000}, {&(0x7f00000007c0)="1f1efa76573efc14172fab29cd134827ea560c3660bee708c4011ad18deb180908ec5e22bc279102fbe4a57f905951c7cbbb52d95c997c163d62bb345d6966aad9c3fa9128013807c68e382e8dc8599e31", 0x51}, {&(0x7f0000000840)="94ecf79c0c8993dce04d4b5ee19108b02b0125cc26699fee2e3f73a49505ba18be3717b168df324d2654d516021b7be0650e6644161d6ffcb71154a881c6589ad0e156a9b620cc729cce866f2f6451779a51fea2da68884702cdcf037a7669a2b043dc980ea2648375e76ca4a939438c19b2a1dd6e3e6f86ebac7f1d7d92c99d10c3cae261150fb6957f592d89110822fa47d7f81eaa276fe5860265a1dc950db0b42ba6f5117d185e3dafba6a30e7df56b5eb437b20b625baba5716f7044b38fbefaff8ee7f9b3b657effa95bf5e13e23e413907cdc25edd50a22e9cad93ef4ab7fc115fc5902756d9e453d3e93", 0xee}, {&(0x7f0000000940)="541dd00a2ccf8f8e7b0037b7602e09c1c4803bf285243feffa19069f0420baf96e5add6bb6945a2ed20271497788b5a3b9cc0abc99b1d5b1f35c63fc0e6aa0b61a8c0d451a", 0x45}, {&(0x7f00000009c0)="fa376a24a618e72294f97aa50fb25da5b5f10aeabce09a21b227a91ff739b9746f4390f53949ce02e757a27c0a541d1c7b62ab05f11d5e12bb79d394a291ea5f7cd6404ea56809d18b7680b9ac8012eca8193331422921057a223eca9015b7d6c94fa15641bb6f142caac2a5066e65a51213883b4feddda1f3899bd4a8eb041475d468432a769cebe67ef469160b06c8166b", 0x92}, {&(0x7f0000000a80)="b4c8f4e54d2858c1dd1aeba8f315942f03144cf477ed0b36ca027264759c49a2be7750d86133e56aa43498dc6eefe38e436e2c5e8f4d8dc89e3374f8cd1f55b2d78648bdd9986a9daff2533721045cab3a8079e0761edf8588214546db0a5ea89a44dd35bcc8ee6219412e03ba271f4ee8c7393331ca6f004f05adf9a5112d1e3740e85a9bbf08dd3e4026ff53234bf9ab7587184e3333b2d31906c0cd2522fde975cf28b47e0b1c", 0xa8}, {&(0x7f0000000b40)="8f20f7b0c00adb96296ce2b2c7f0b83e3493d95bca85cd1838d08d9e28a8382440509afa89dcf9025b23d95f9702b2865d397f06a7b855c113ce842a2e4e703375158dffa4f29e217e8b983d392b60ec80197ea286b6904f8cc4ed33", 0x5c}], 0x7, &(0x7f0000000c40)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x50, 0x4000090}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40), 0x0, &(0x7f0000000f40)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x80, 0x800}, {&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000054c0)=[{&(0x7f0000001040)="a4e3e1f6bae9c70d02ec0831179daab38d2e9c327017bcf1aa76b9f31c061b60c0f62236b1fc5a0b83b3769fb77f74b1a86211b2759c50854eed164b3a57da23feac2a0543d098517621c9ee2eb84f76bb3c18b54b8f7e4c6aec95211b7f1c0304599b52203bcf238addc3c168230a90881cc50c7d9ab3ec899ecc7b642bceb14a3faefd933e531e4e3ce9e62cbde20c662a06e6929d07984cc29cfd056666bc5161b51753fe3167977846b0da0296675980a2", 0xb3}, {&(0x7f0000001100)="794ab66e59ded56dd869deb8c2210e89f520c4bd646875acfe523752dc7a7c29c5", 0x21}, {&(0x7f0000004240)="a1047a48a113ed1e25d23023c62570624e632387fe6e988caba49104947204d64ecd860f49e370b6df01012bf51f70655c44619e61eb2c845a00d54071e95349c7128fbf38ee90c2ea6521d331fe1fae31e0136aeee29af427eda6b24c60b97c5887ccd5b7b59a03fed1ba53db90ac4e41399634024faa16fb5d38f6a4b25836eeef102ca2c446e4f197c0678901a9fa0c8dd2db89f8992ec67d05e72b8762bf709c1d32a9d8a8c0ec52aaa543ec10caef6775ed08c8b4a663875c2a4105a4ac7569", 0xc2}, {&(0x7f0000004340)="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", 0x1000}, {&(0x7f0000001140)="870a4c55fe8f04c182f79f5969292b4217cbe033b794a2834b13dfdb96086ee209b5fa2d3fe31e13d97a593c0301091e18313e736f0422b628f5ed6f4c274d7aa411ec9ba6d47acbcd1869f3d4c8534a1d860f67c35a3c1442948eb03482d3276b82bcc038ec161d4b91a0c39b9b52d86e6bc7bfd3ff3a87fa", 0x79}, {&(0x7f0000005340)="6a001990720d49c432691e7ffa5c0f0340f76d6a743379a021a7c171a1aab0ea1066a91f62d96ddacc664ee107e2505992e5a48a9bd8abddea5ada7e49276b21e51faa4eb7e25906f19854710c287b4c8b12db2b98cf10c20e90474599e8511bfc621b30960db4d38d20e20adf01323d59b67e21dc06bbf80c7f2d8f8cca5a67c4df622b6f9d75d231b834ceaaaca1b5c1", 0x91}, {&(0x7f0000005400)="c56954675dfefdc4279fc1e79b372df780bf4fd860c15ea48dfdc07b9da86372188efa878a3ff669293e89405f6f7eaa7dfd24f4ba556ffdf5f1726da439af6e890f6ba32a87e721db5fe87386c006a09d304e37a8e4a22f128e4db283de53b7514cd068e2e7f808a00582c7dcdef60739e1d08324eb5f308c63da5abd9290a2e23e3bb8baa4187322c3019484016221ff39d417", 0x94}], 0x7, &(0x7f0000005b40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r5, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x128, 0x200008c0}, {&(0x7f0000005c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005d00)="78553f8747a188257ad326810b0c35b3cedae18c356fe68c8bb7d65cd84c7fa80fa09872922d91180c915b486c389e9bf65ca61afb725bdd", 0x38}, {&(0x7f0000005d40)}], 0x2, &(0x7f0000005dc0)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x30, 0x20048044}, {&(0x7f0000005e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007100)=[{&(0x7f0000005e80)="3a56a0e4c8fac284c4e16719e410a3643f4e29a10f13cacc8bc5cc10072f5b710ca9e472866d65e3c7b47425888f82a654b07b8a9f0edb11f0be039bcb", 0x3d}, {&(0x7f0000005ec0)="e2c1ce0f5b7b5190203fc950e1e708f134a07253ade671d8d027c07b10fd33c757b9d1d414acae1f151b2b3031d578a0cc3dc2682ff47009da625488cba983dcbb55c5c72aeef5eb036e078c1e63daeb67d30350436924110c3aa0f547907a0c5c6c0f95f744967998e77760317996451f", 0x71}, {&(0x7f0000005f40)="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", 0x1000}, {&(0x7f0000006f40)="03b816a52b43ab97e0aecce4748a241023072eda24346ea4e30ff2ccace603ea9c33db28599ad9a2cbcc4d36f72bd536b722f2207db4c1c1bb87b3841a07c96ef3b4bccacca5026db2f00494866bbbb9846560b38b44ed69cb4ef5e122d73b724d47a428c962a07861518727b1c7be7c21ac9d5e89886083dbc2fd83979b4b283e7311e64ba47010cf98557c8289841a02eb624634d45fb430f8e6720a7b8a4b3e36c170892b9c83da0d8385763996bbc57e49c071a14b776243e24a318bcbfcc9617e1ec26c69617ad4e14fc1bcac478e74501c628035951782be04a098f6d30fafd70e6771d484f64b6082c46a4df14fb28643d5979fe529a53dca", 0xfc}, {&(0x7f0000007040)="5360517ad96da83aa163c3297c281e07502277c47e36644002cb14cfb7e9f4c1468d379b006af9c468de32d47d38cf12e3b6817faa39ba770f3ab6117bc110d0ed8badabf6cd219beb52bf8ea4b53fda5ba6291b46237769e32fc3d5bc7e2b334cce36b65769fb5ceda5ff90ec39cf78f2d927d6e3e9127bf052ccb798dc470313ac9f6b17665ee547a33f252d605701cffd5b6ca6cd80dd", 0x98}], 0x5, &(0x7f0000007580)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}], 0xc8, 0x840}], 0x5, 0x20000001) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000006c0)={@mcast1, 0x69, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@local, @dev={0xfe, 0x80, [], 0x15}, @dev={0xfe, 0x80, [], 0x13}, 0x20, 0x8, 0x3, 0x400, 0x5, 0x2ff, r1}) [ 285.911965] overlayfs: unrecognized mount option "xino=on\" or missing value 12:39:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000ac0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000008c0)=ANY=[]) 12:39:59 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000200)="1c53261cde33459298603989dcc4e598f399a436ff1bb1c32adc6f4fa76b7f3c00879ba22dcc79b1a351249b1e1f2cd70e1e511d32abba7ed20426850425d56196002185ed7937d260a18b30b2040a7bea52ce4a92e66256d5048b1b9aec138d", 0x60, 0x4}], 0x1200000, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>'}}, {@audit='audit'}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) [ 285.954229] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 286.009987] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 286.062745] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 286.105214] overlayfs: unrecognized mount option "xino=on\" or missing value 12:40:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000002c0)=0x4) 12:40:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) listen(r1, 0x0) r2 = memfd_create(&(0x7f0000000400)='/dev/dsp#\x00', 0x2) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000440)=""/30) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x40000) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f00000003c0)={0x0, 0x1, 0x8}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000008000000000000000000000000000000746a66c1fc1483b86355de000000000000000000000000000000000000000000000000000000000000000000000000000000000700000003000000f7ffffffffffffff010000000000000000000000000000380000000000000000000028f90b5d7600000000000001000000000000000000000100008003000000050000000000000001000000010000000000400100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095a6d23f77500a87b424b9d200000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047c723920e2a945e714b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013007b5aaf2338d4e0810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b63b2c75b99aad340b92847500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070b7cd26a14a5ec700000000000000000000000000000000000000000000000000000000000000000000"]) 12:40:00 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x100, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x2000000000000176, &(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000600)='GPL\x00', 0xffffffffffffffff, 0x66, 0x0, 0x41100, 0x1, [], 0x0, 0xa}, 0x7) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) 12:40:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f00000004c0)="0fc5ef2ff42c2503df76b6a5a8122b40164ba8a977885f9f7c28f45e844eff5d337052e90646bc44e843d008481321951c801200000000cd5faf6be69eb7cd8680be20c876cb0fd107b06d00000000000000000000b4de14b17061124a04cfca6fc8ab29da9000000000000000000000", 0x2) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="b7227cb640fbca7b17cf5efe8e08e9ff568a4d194d7e3b10c9963908fd95fd19e1888dbc7c890abfb5dbecaa9094e12f4fcc03d3b23f810d2a6a85d3c991956eb2a9712fffab4e69c0bf494aaf12b13479b4b84b2b491cbeba2fe20b9629121738194b15044c434721639296e5820f2e2cdc4abb6d9df7ebb4af781e1a2c2855215c52c71007214fece5688011b523238dd11946119d53a32382f51547958c61578c40a531f4854aefa10dbab4195bac17904afa0941c8c5b9c2c18aa472606790d75c90e81a304472fc9ae9d9a199f36ef5000000000000000000000000"], 0xde) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xf, 0x11, r3, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{}, {}, {0x0, 0x0, 0xfffffffffffffffb}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:00 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x3a, @local, 0x4e20, 0x2, 'rr\x00', 0x3, 0x7ff, 0x62}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x2, 0x9, 0x3, 0x3f}}, 0x44) 12:40:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x1200000, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>'}}, {@audit='audit'}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) [ 286.732291] overlayfs: unrecognized mount option "xino=on\" or missing value [ 286.740830] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 12:40:00 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x3a, @local, 0x4e20, 0x2, 'rr\x00', 0x3, 0x7ff, 0x62}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x2, 0x9, 0x3, 0x3f}}, 0x44) [ 286.775331] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 12:40:00 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x100, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x2000000000000176, &(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000600)='GPL\x00', 0xffffffffffffffff, 0x66, 0x0, 0x41100, 0x1, [], 0x0, 0xa}, 0x7) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) 12:40:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>'}}, {@audit='audit'}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:40:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000002c0)=0x4) [ 286.909242] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 12:40:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f00000001c0)=':lo%ppp0cgroup\x00', 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x5, 0x0, [{0x2a3, 0x0, 0x8}, {0xbff, 0x0, 0x66}, {0xbff, 0x0, 0xc521}, {0xb40, 0x0, 0xfffffffffffffff9}, {0xbe5}]}) socket(0x19, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000746559c7c2b9996a4e550c0200000000000000001d01000018000b0010296c7e6253db8c0000000005"], 0x2c}}, 0x0) [ 286.958320] overlayfs: unrecognized mount option "xino=on\" or missing value 12:40:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) close(r1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) 12:40:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:01 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x26e1, 0x0) fallocate(r2, 0x0, 0x0, 0x1) 12:40:01 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@uid_gt={'uid>'}}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:40:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x42400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x3, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x1000000a}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x9}}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x200200, 0x0) close(r4) close(r3) r5 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="c324d732fab8b65f627a23ef146a43fca1a87a19c8eac226082419111463346b2f80975951d7df1f1f96621a9e549a26f23e6610c55cf442c7f914a080f5b5c022c999e138c2a7092499196c43ccf09e72e17d97c3b76469db81a262da2da104254f31e8c5d7d28da598ecc921936008e919c480567d85246f757df5650f", 0x7e, 0xfffffffffffffff8) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/vsock\x00', r5) 12:40:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 12:40:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000480)=[{0x10000000000006, 0x0, 0x0, 0x5}]}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@local, 0x32, r3}) getsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x10000, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000200)) sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10482, 0x0) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000000c0)) [ 287.582352] overlayfs: unrecognized mount option "xino=on\" or missing value [ 287.639514] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:40:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 12:40:01 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}]}) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:40:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 12:40:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$inet6(0xa, 0x804, 0x2, &(0x7f0000000340)={0xffffffffffffffff}) gettid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000380), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x4}, 0xffffff21) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x0, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}], 0x30) r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x80000000, @remote}}, 0x5, 0x7}, &(0x7f00000004c0)=0x90) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000005c0)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x3, 0x0, &(0x7f0000ffe000/0x2000)=nil}) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f0000001600)='/dev/ppp\x00', 0x0, 0x0) eventfd2(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) 12:40:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80, 0x200) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0xe9, [], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/233}, &(0x7f0000000340)=0x78) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/203) io_setup(0x0, &(0x7f00000004c0)) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f00000003c0)="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", 0xfc) [ 287.869611] overlayfs: unrecognized mount option "xino=on\" or missing value 12:40:01 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4004, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:40:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 12:40:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 12:40:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80, 0x200) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0xe9, [], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/233}, &(0x7f0000000340)=0x78) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/203) io_setup(0x0, &(0x7f00000004c0)) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f00000003c0)="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", 0xfc) [ 288.184341] overlayfs: unrecognized mount option "xino=on\" or missing value 12:40:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 12:40:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:02 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on', 0x5c}]}) 12:40:02 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x48280, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x800, 0x5, 0x101, 0x3, 0xf93, 0x7, 0x4, 0x40, 0x0, 0x5, 0x4, 0xb0a2, 0x100, 0x6]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0x400}, 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x6, 0x136d}, 0x8) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r3 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0x80089203, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x3, 0x30}, &(0x7f0000000380)=0xc) 12:40:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x1ffc00000000, 0x8) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0xffffffffffffffff, 0x7fffffff, 0x2}}, 0xa) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) recvmmsg(r1, &(0x7f0000008400)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f00000082c0), 0x0, &(0x7f0000000200)=""/231, 0xe7}}], 0x1, 0x0, &(0x7f0000000140)) 12:40:02 executing program 1: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) ioprio_get$pid(0x1, r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000180)=0x1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x101, 0x50200) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@mcast1, 0x16, r4}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 12:40:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) 12:40:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x8, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x11000000000b) r1 = accept(r0, &(0x7f0000000000)=ANY=[], &(0x7f0000123000)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x24c100, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffff}, 0x14) [ 288.555455] overlayfs: unrecognized mount option "xino=on\" or missing value 12:40:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) pipe2(&(0x7f0000000000), 0x84000) r1 = syz_open_dev$dmmidi(&(0x7f0000001700)='/dev/dmmidi#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0x6}}, [0x5, 0x3ff, 0x69cf, 0x7f, 0xb2f, 0x6669, 0x8, 0x0, 0x4, 0x800, 0x9, 0x0, 0x0, 0x1, 0xb241]}, &(0x7f0000000080)=0x100) timer_create(0x1, &(0x7f0000001480)={0x0, 0x4, 0x0, @thr={&(0x7f0000000380)="fae81e89450f9f1a447064f39355e9995ca6cd8e4a534fb49d7938d1e1b2d39cbb00bd121a38f4df3535a26bce1341209fb46fa0ccd790a7b17409e9330d4899c97681af04cc12da810c85f41d874d1182eac34dbdc4e633bb361683bb4be93eaf3ddee2116fccb921b8f283bddd055ba19d8dfcb2ef5840cead136c90ddef8626b4454527c41fae539bab452c3c40f422cb70dd8986e4e6ebe0d01c11e3db157c359824de4a787c78e14fcf277bbff0fc45e478d81bb7113397413a46057a7f918850b6916de378fc79dd17fa59028d694656adb6415c5272", &(0x7f0000000480)="5e158589c29239fc652d337873555dfaa1620beb5fd42848852f2387e9b2a65ac5180040730a6325ef24d2a39b939d5f025df3d29f4de18fa17324a7f2dd9ba9da78a884233f295c6807662da0802bd641b29e15682cc638c626cf658c719d1132c838b5c786555f0ca16f2b2258709425f3dc31232ab90313bfbaab046ff30f0cdc85922b7ef70db2a8d36f6e10437716d99419e6bd4b32b67f0d5dfd029b0ff3ee7eecaf7da9d1ed5039ebb52ad6baa1b746080c5c3801d296278b34fe087ddf206a68b5acda7c8e80fee828b61d14d43f524873c9937d870ada7dd04e22d3aace4300febbd74475434f2548932157e09cb8eb3e7208a5ee733c4a9d789f7c1d743641767c477008d7b2828a1ce7dc8ea8a1404efcfa5c4c47943e23a1381d1d6a0296fd246b0c6723aad9957e2d2b80decb59aa09872c6b25a1aba3ea4fadb214500bf4628b908aee5833cd601d992d39ae06a7614666bd5e5432d9be2112e829786fb8045feb661b7ecbadba28602f1dfa310aeeb668be71ea5c3ce8ac304eb0ccd61a42b4ff13b3daff1b68638764f675e238f90d4161025d70e9a7e1252aea754f19a3d0666aaa5e4292a06d6a22350f1da01e1e76a97df7eb5fbf1409c8e9510f7f8e0c3ccde571a997b9f226042c32ed5378f9984075b3b91f3e39d960be7d018552aca4ec53c4fb35c3d2dfb1af29e49d8cb88a34ce831ed25cffb234d023dea083b82f690d228fe548becbb95d68590ce659d1f7ecbe9d625a39f9bf69be1e75e721d9a6c5c30d1f73715f99dd5affdce29d43281e35de71d7b97331fb5e5ce2fabf189a4f9d9d2480014a06b5a2b9514b1041d2e641cbcdf3407baeb3c37198e15eab94f1d7c88836b8c374f314d843e04de41b89a3687d5315ed78305e6e3c6e14a58c911585efda47ae8d42836b23fcd15672375acdddb7113eff0d7b992162557549c830fdf1147d23d7c8ffdd7be0dc978c3a0febb330b19f335bead7a4f67e2a1718a91a43cf533afca41b743a389120fc889075198bc9fe0389be5e6c4a86ac4114e522ca63b650b2f4d764bfd1846224fab1c1fed1d3c6ce2f9bd962475da5da6eb93848a916a06a7bd92f3bd9848bc69198568eeec59dec24c51d05e762e851f5d5e7537f6f0e3812b132e70864a8e38143945c42471b2edcdd59bab326128677447e71922f9a0feae69ccfeaa0ad8cd6993b16c4fd1ebe3df6183699bc19198469cbe7b4cfce244ff3116e923dabf3292ffb6ac054d62d778a12fcaeecb508c56339e7aa7f96cc44890877c39b7fca2e3cb86f3e88fac3de4e77ceaf8d5c44ca6b282dfa503f77ae1322fb68c913d39efb09bc1326664c5037b7e2dbcc42b30a05bca5db91e1bd2d8df5c55a5e3d9c0175e602efffa1ebc87a36b6ef38a4d3d787acde7c122ef5796cf757798ce8ae9e84cec9ac88e03a2844f1088f37ef0c833c44616b3bf6fbde4d3cf881bd0623d25918f75db2de8abb8a59bd47165170373a2f108114caca1f111995ff7fa35e05aff4268d59cfccb613378493ad51fca77d79572f22f8ca57c17ae5733d5be00a9517da7145646b33c88720881a09bbaf667f83d490b67c269603ff8f6ab306d822cb2621ad8f38e26e68f88f6be471b7364e6fdb20eeb3887667f499f215d33ea4d410a01eb0912ba16b0337dc35cf68cb613971898faf65989fc2dff05f438696381b6e76fef33a20ab0359135d04ab66834075d69b5a61297b9830c0e7cc56738310bbc909111b9cc964daffebceb28764c04a9e8de46e349e328845aadc2ea46463f0ba123b70128e5aadeed6b0de9c76e347cf60a83a06bfd1e427c3291c6ef074130b6f51e6b5f13277acd51fccec9ce84b97ae82a530c5914f6713da01ac54bad97f1854897d7d631cabc0b743277958dcde0cc4a41ad30809f6d24cad697b4a2bf5f028663124c2431818c99a43dec0f011afdf44620460a413e09a5405f56d49727ddb42439cea6278bba8dbbf764b952fe6a1ea1455715d374f65b44b9391b6f64ecb91e1311a1aac788c18bc15673f3a2e9a77c87156a3e5690c69a3e225368f47cca67ece387ef80ae3ac527eedea3d9a4ee64b8e3e4104078633a6d144944c0412e573262a85e5c8ad2f8f5a2e8f51964e9b24138cff59ca190b6af7a34844616c32e5034dbfe58a754856d25fb32f32c14e930df623c0c274ace858890aae1cb0e0f1e99b9d27dace2ed914cc05f5c99cdedc7b4b90b448d694b2ee8be8ed8277fcdce7b5c9f43aea61ad8ad0cd087591c081d5f6f0045a5e3c12f125e0bc1834089623633ff8025588f1cbe78621f1cf75a229a580493bea22b23a3b72cf9c6a699d204b76f68417d583167682133d9cec5bd99b6905d6c057d0e604a465fc9db52199e91eaf33f6e22da3c2b3aec1a68c0cc7a458758d82222f9686aca3a66163ffe8f970ada01873e827b7b6ed0c6d63aa7e5ea231fee20577789f9b7a767cbc4f441da92575bebd8215ac6582ff8c894c67bf1c9ab9065104a0fb4c40e2c2ef07274b69342933e46ca4682cd7f4c704d2a8e23e1f28100b807241d5b2236ce1fa96660a81c46ddb3028ce60a5087ed95c8a1a5b85f33141b2e9cf960f06e439a740554b7c83fb5ef872392975d1f0ac9b0e6ffb74d0698ec6117a8bdf43e5a34edb82e5c6b539fab3f539f54065523bc867078a03221fc37966dff3f572d78566d5a052556808d7be9a86d32151429a2f2f6fb389d085c4293ef0f69a67c6196abef6472abd19e8d128c2e2b029a1b8882aa2dff1fbe0605e77cfb7a4d628d7b1ce0abc713f27c500ef86985c82eac3675f8c0c5047f41e6856702933c84eb1ff94e0d65edad9a27cc30ecf821b609112c0a154f88a2a0a5013cba3b34d916eba67826c9527d1c3676bdf367adb5a8a605dcb30d24192d7c792dbf873a49b46d30a27db4802d463896e5d7e700009b86f38d86b1107f814ac74bd1a64b8edf1ff860f00233222c19ce079202c5ea2084c3440af16958f66559cbb7e8be103d6afe8ce5585e918c06125c4aabda09279b045ff42a83a6122533d00e711f045442563052f64d151f8d7456cd4bc9251b400b266559b2cfdbac64a827355984e1e81e4f963ee7432334efa0cf86b2b2847ee61aefaa289fa2cdaf6087ffae53137dbec6a9be24684d22b45fef0a8734bcb01564e53f85b61d9003c625534c6ec88e4b3d68390681d7834ded98366cfb5a98b9bfee6ad1e32aa88806773cb1fd1822afbdf5188ef6d57ae12c77a655ada9d365ebff8f9184a0159ee1883dcdb3f59725ace78d1ebb47bfe7e48c804e10745c432ad59d92b084cdb290ad7f4edbd58fd8ce2fde1d0c57b2959d9401af1423959bfa2aab92a842761972db902ef4ea930979e75d84a7afc0abdc9927252e6d57f9227ed7d96f59932a2fb77cd2a818d10174f80071515914b219da5ef8fcaa1cf3fbe8b22951303e1a7db7bdba0cbf9f456fee2d9968af62dff74f8444645e92cf1df6e345702f844c986eb3b51cf7623714674b0db84ad2113eb48e44d20fa9fe3766dbd0109fd380a38f36280f8b2a0a2a8a3bc01332074870f83a776611bb853666053162c46b724d474eb2de91f6881e328a4c70703d24b62189d6cd85aaccddad04c6950cccf7dca6b508d328b6b401b303720de4af0e0867406c79fa7b8ff661ec0c6091cd16fa87b91529307d9a5090c33b3cd840fe9f88cf3557ecf199fe1db880bda158ef5fc8d8eab60fca0dc2c38d18bedeb9241cda7955d79af07fbc870b66a21418ee5b63c370e99b9e0a66d6fef52f97f088f216b78d7e3f1c6e8836188002ac206083c025edd81ca28de3fe2bd4556afe45ac708da7da9182d3405147768fce092e87dffda481df5d2fb4765574d17631e0974438bceca80bb22b4eeaf12fdd7ea21fafd392a92465da512db3f0ef9e143a4dff585b434f96507f743d0b9bbf96af7fa651cf694e300b2b755d485497b41c31c40a01374d780177c85b19ef3e1fadbca5dfdcfa4b4461769bd16d03b7b12cd6d72de9c5834e2ba94148c99fadf875235bb3bf24f835a8f82f787dd3f3efbabf30f4b46fb1ea2d88bb62b665d5604775dc4acc4d7a9cbf8f069cbf6628928556f62e76848965b60d425501b8c47daaac5a983d4b6eb09d573995c6ae520bfd7aeba1e3e535deb8eff479bf89ed5a9126616583530e07da9e564314d7b531bdf4956f3a017da8acb89f90c426cb8461114caf72827d9b0cba9dd5ef164079e5b7bf052c01e9c87f9e8c4fc4de749061a80416e0d5bda980ba2bc04c5a348f988c7ea8c04cc61851b3034705212db881e20ba9651ad294f63e9d0da5ab0e9f8deef3eab61dfc1d5e020ebacd77e8d44c7af58916f8a9749c68b2c60354b14f4e624afaa1ec94397bc8527be20cd74864bc1d0f3d74ff9d68b5d5115bfb96e6697d6dd329c0e08d7c1efd60db323f663d01fde3c3466649f85012f7d32692fa1678ffa31851e8476a5c93cd31bc23206f2c1c0ef1af4b3d777910c452e667d27601fcb71227b6feb6ff4335f6687b78f6853400cb1452d02f49a33fa687daebfa29f5a6bd705497f5f846d6f0c630a49186dd701549db8b7b6035b85fa2dfff914b9a92771d72ed5783c60488033f3ed5498b2feeb7aff42f569d816f5cdefd92785f91951fe21c21b6c2bbc2e87aa51368a26c70ecff440c5fdee7ac701f6355027fa373f69da5e54786139d63b42d176dec987c856b2bc1c457839c43b9d97b80b3b265cf045bafdb53b3e5e0d3636efe35ed93d6426e8a998c436b80210196540478427d0b401cecf2e0bd1b8236660fcf2d3c7800fba8e16c35b562e65ba8010bff1b10ce67b1b0ab2cd7013640b6cc48cc9d539649be063e00c0e97d4ff74659f5c484ed66d6b8b1da53f0eeed05d1c5abdc0a6d6fe6d667b109ea4826382779e8708cfe8068dabc59957bf81251c664c1e4280d0426fc95064d2958b60b97a54404aeaf8188bdc5377124208aabebe3c7dde5ce004481299ca2ea0f3ca9b0eb7f15249668d423c04d0b5cb7602403dde2f49327ccaa87f9e783782a38a9a8c7ec7dee95abfc9bf0a30e6804807491b1f225e191aa60732d7529dddd99e4d66308aa565deaba5e141c5200e41b717fa7948823788515cb9ba00e2a707befed97062a59eea4119de081748938b2f3a1fd69831502018ea9fa988bbbab102559fa753b38955efda7ac39adae4732c6ad9a22f7b4855ad07486be81985084a2f1b6faa9219d02120072100da831e1fc0445877ac422462cbbca1dd5eae7485a63a4ef7ccc97d97ed43742f349508528361b3d2ed6c6f6d07bd28f8038760e8b41798d13cc6f7760cac9c6c26059b7e21796a6f34fec26fa9982182de8f6968c9892f5ff94d484ff87c72ff51e6305b1edc1b6836804b5a2876366d4e638a18a29aa8b53493b2db4f16efabdc41ccbbf7718ed26496a011c22444055ee5795cc0f34290f98def92e3687b578690ca2d3700651c04a4a8d3157df7379210e7683d1113cb47a3f9a3be8775e9878cf93d4824a07e3299dfaf3f0758d0193ec9db57345716020cae74914bd880c4fe8c28e01f2670a96545723553b487d5777b2c37a5ffff1fc10352634286caf64fbcf72e8df4ac0fb80279b9e53dda02eb9c846007c980476143f231f9c772958114d582980e1677db830caeb19fca5e9a508863425265ded4e78b78b98b990c6792ccad40e06e0aa162d7d9ecb9ab04fb040fe3c1d6b2bd0b6c2dfbc73d6191cc60c7852447f005"}}, &(0x7f00000014c0)=0x0) timer_gettime(r3, &(0x7f0000001640)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0xaa4, 0x4, 0x6415, 0x4a, 0x1, 0x80000000, 0x5, r2}, &(0x7f0000000340)=0x20) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f0000001940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x3c6, 0x0, &(0x7f0000001740)={0x0, 0x1c9c380}) 12:40:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) 12:40:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="66c56f643d08a1ef5cf38f57f222fd42b7a35a4c731d43bf106a8b2c3dacd14775acd6de7ea78cc101261081747bf81adbde19166ce4e03fc7678261a6ebccea383962e962f861e9dff351c57ca137936743098d7a070f55ff78cf1daa538f40e2f84e95934ec7000000000000000000000000", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000004c0)={r1, 0x6, &(0x7f0000000240)=[0x3f, 0x1f, 0x800, 0x0, 0x81, 0x4], &(0x7f0000000280)=[0x2], 0x41, 0x7, 0x5, &(0x7f00000002c0)=[0x3f, 0x40, 0xe000000, 0xb7, 0x355f, 0x7, 0x80], &(0x7f0000000480)}) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x189c02, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) read$FUSE(0xffffffffffffffff, &(0x7f0000005000), 0x170e) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000540)=0xd97) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) dup3(r2, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x9, 0x400002) fsetxattr(r2, &(0x7f0000000040)=@random={'osx.', '!security\x00'}, &(0x7f0000000500)='/dev/admmidi#\x00', 0xe, 0x3) 12:40:02 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@default_permissions='default_permissions'}]}) 12:40:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0xff, 0x0, 0x1, 0x0, 0x6, @random="a43aed13d828"}, 0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 288.832316] overlayfs: missing 'lowerdir' 12:40:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) 12:40:02 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x240040, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x5d8, 0x20}, {0x3}, 0x942, 0x4, 0x59c6}) prctl$void(0x3f) 12:40:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) fallocate(r0, 0x0, 0x0, 0x5) r1 = socket(0x10, 0x80002, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x20, 0x20, 0x201}, 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 12:40:02 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 289.009212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. 12:40:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0xa0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) [ 289.067453] overlayfs: missing 'lowerdir' 12:40:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x4000, 0x300000000000000, 0x0, 0x0, 0x4000000]}}}, 0x98) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 12:40:03 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)) 12:40:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) 12:40:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x901, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x100000001, 0x81, 0x3f, 0x4, 0x1000, 0x7ff, 0x10000, 0x8000, 0x7, 0x4, 0x8000, 0x988e}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) pipe(&(0x7f0000000140)) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f0000000200), &(0x7f0000000300), 0x8) 12:40:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000000c0)={0x40, 0x4, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xa6f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r4, 0xbc, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x7, @remote, 0x3ff}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0x1, @mcast2}, @in6={0xa, 0x4e24, 0x20000000000, @loopback}, @in6={0xa, 0x4e24, 0x10001, @remote, 0x5}]}, &(0x7f0000000100)=0x10) close(r3) dup3(r1, r2, 0x0) 12:40:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 289.302306] overlayfs: missing 'lowerdir' 12:40:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20c82, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0xff}}, {@sq={'sq', 0x3d, 0x1}}, {@common=@version_u='version=9p2000.u'}, {@rq={'rq', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x5}}], [{@uid_lt={'uid<', r2}}]}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000300)='127.0.0.1\x00', 0x7) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x0, 0x7fff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x7ff, 0x81, 0x1, 0x401, 0x6, 0x6, 0x7e65]}, 0x12) 12:40:03 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)) 12:40:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 289.535492] overlayfs: missing 'lowerdir' 12:40:03 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)) 12:40:03 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000500)={&(0x7f0000000440)="de0fef96653bfe48b276187305dfa39246036bb5eeee4deedfc0c5efa80fe0570b228621f5d177291dc8929d944bd858f7efddd21340d9aa2d5aa73e133bc4567721e3893b53d1af997fc1b0f347a99da1250a615aa3605fff69d306c80328053a4b4ddefa0785569683041e31e90893eccffc6383454c30dee9c3532b5a99625ca3ebd7bd2644e563918d3298b9875be4f436ed87f8cf3d07b3e06196a297e838", 0xa1}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x40000000000200) recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/37, 0x25}, {&(0x7f0000001c80)=""/27, 0x1b}, {&(0x7f0000001cc0)=""/160, 0xa0}], 0x3, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @rand_addr=0x1}, 'teql0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x3, 0xffff, 0x3, 0x10000}, 0x8) r2 = memfd_create(&(0x7f00000008c0)="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", 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200)={0x1}, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={r1, 0x1f, 0x9}, 0x10) write$selinux_attr(r2, &(0x7f0000000140)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00') preadv(r3, &(0x7f00000017c0), 0x1fe, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) sendto$inet(r4, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000560e, &(0x7f0000e68000)={0x2, 0x0, @local, [0x0, 0x2]}, 0x10) 12:40:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:03 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e22, 0xffff, @ipv4={[], [], @remote}, 0x4}}, 0x2, 0x1, 0x3, 0x1, 0x7}, &(0x7f0000000380)=0x281) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, 0x0, 0x8001, 0x40}, 0x14) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000240)) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x8, 0x7, 0xd8, 0x28}, 0x147) dup(r4) socketpair$inet6(0xa, 0x6, 0x1, &(0x7f0000000100)) 12:40:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000900)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x4) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x0, 0x3f}) mq_timedsend(r5, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000002c0)=""/60) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x40}, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f00000003c0)={0x6, &(0x7f0000000240)=[{0x8, 0x2, 0x10000, 0x5}, {0x9, 0x7fff, 0x2, 0x3ff}, {0x2, 0x10000, 0x8, 0xffffffff}, {0xb25, 0x3, 0x6312, 0x8000}, {0x9, 0xffffffff, 0x8001, 0x8}, {0x100000000, 0x0, 0x3, 0x4}]}) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000400)={0x7002, 0x10000}) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1d14bd000, 0x1000000}], 0xc0b11f2000000000) 12:40:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 289.793657] overlayfs: missing 'lowerdir' 12:40:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:03 executing program 3 (fault-call:1 fault-nth:0): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 289.993599] audit: type=1326 audit(1539607203.948:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 12:40:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:04 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000500)={&(0x7f0000000440)="de0fef96653bfe48b276187305dfa39246036bb5eeee4deedfc0c5efa80fe0570b228621f5d177291dc8929d944bd858f7efddd21340d9aa2d5aa73e133bc4567721e3893b53d1af997fc1b0f347a99da1250a615aa3605fff69d306c80328053a4b4ddefa0785569683041e31e90893eccffc6383454c30dee9c3532b5a99625ca3ebd7bd2644e563918d3298b9875be4f436ed87f8cf3d07b3e06196a297e838", 0xa1}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x40000000000200) recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/37, 0x25}, {&(0x7f0000001c80)=""/27, 0x1b}, {&(0x7f0000001cc0)=""/160, 0xa0}], 0x3, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @rand_addr=0x1}, 'teql0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x3, 0xffff, 0x3, 0x10000}, 0x8) r2 = memfd_create(&(0x7f00000008c0)="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", 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200)={0x1}, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={r1, 0x1f, 0x9}, 0x10) write$selinux_attr(r2, &(0x7f0000000140)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00') preadv(r3, &(0x7f00000017c0), 0x1fe, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) sendto$inet(r4, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000560e, &(0x7f0000e68000)={0x2, 0x0, @local, [0x0, 0x2]}, 0x10) [ 290.222722] FAULT_INJECTION: forcing a failure. [ 290.222722] name failslab, interval 1, probability 0, space 0, times 1 [ 290.261008] CPU: 1 PID: 8902 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 12:40:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 290.268241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.277659] Call Trace: [ 290.280411] dump_stack+0x1c4/0x2b4 [ 290.284068] ? dump_stack_print_info.cold.2+0x52/0x52 [ 290.289327] should_fail.cold.4+0xa/0x17 [ 290.293432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 290.298610] ? graph_lock+0x170/0x170 [ 290.302452] ? __f_unlock_pos+0x19/0x20 [ 290.302471] ? lock_downgrade+0x900/0x900 [ 290.302517] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 290.302553] ? proc_fail_nth_write+0x9e/0x210 [ 290.302575] ? find_held_lock+0x36/0x1c0 [ 290.302650] ? ___might_sleep+0x1ed/0x300 [ 290.310930] ? arch_local_save_flags+0x40/0x40 [ 290.310947] ? __lock_is_held+0xb5/0x140 [ 290.311010] __should_failslab+0x124/0x180 [ 290.342058] should_failslab+0x9/0x14 [ 290.345900] __kmalloc_track_caller+0x2d0/0x750 [ 290.350614] ? strncpy_from_user+0x510/0x510 [ 290.355037] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 290.360666] ? strndup_user+0x77/0xd0 [ 290.364483] memdup_user+0x2c/0xa0 [ 290.368038] strndup_user+0x77/0xd0 [ 290.371676] ksys_mount+0x3c/0x140 [ 290.375232] __x64_sys_mount+0xbe/0x150 [ 290.379245] do_syscall_64+0x1b9/0x820 [ 290.383188] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 290.388568] ? syscall_return_slowpath+0x5e0/0x5e0 [ 290.393561] ? trace_hardirqs_on_caller+0x310/0x310 [ 290.398589] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 290.403655] ? recalc_sigpending_tsk+0x180/0x180 [ 290.408425] ? kasan_check_write+0x14/0x20 [ 290.412675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 290.417534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.422730] RIP: 0033:0x457569 [ 290.425937] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.444841] RSP: 002b:00007f4978f71c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 290.452560] RAX: ffffffffffffffda RBX: 00007f4978f71c90 RCX: 0000000000457569 [ 290.459838] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 290.467112] RBP: 000000000072bf00 R08: 0000000020000340 R09: 0000000000000000 [ 290.474395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f726d4 [ 290.481688] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:04 executing program 3 (fault-call:1 fault-nth:1): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 290.554899] audit: type=1326 audit(1539607204.508:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 12:40:04 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000500)={&(0x7f0000000440)="de0fef96653bfe48b276187305dfa39246036bb5eeee4deedfc0c5efa80fe0570b228621f5d177291dc8929d944bd858f7efddd21340d9aa2d5aa73e133bc4567721e3893b53d1af997fc1b0f347a99da1250a615aa3605fff69d306c80328053a4b4ddefa0785569683041e31e90893eccffc6383454c30dee9c3532b5a99625ca3ebd7bd2644e563918d3298b9875be4f436ed87f8cf3d07b3e06196a297e838", 0xa1}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x40000000000200) recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/37, 0x25}, {&(0x7f0000001c80)=""/27, 0x1b}, {&(0x7f0000001cc0)=""/160, 0xa0}], 0x3, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @rand_addr=0x1}, 'teql0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x3, 0xffff, 0x3, 0x10000}, 0x8) r2 = memfd_create(&(0x7f00000008c0)="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", 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200)={0x1}, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={r1, 0x1f, 0x9}, 0x10) write$selinux_attr(r2, &(0x7f0000000140)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00') preadv(r3, &(0x7f00000017c0), 0x1fe, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) sendto$inet(r4, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000560e, &(0x7f0000e68000)={0x2, 0x0, @local, [0x0, 0x2]}, 0x10) 12:40:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:04 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x400, 0x20000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000005c0)={"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"}) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x6, 0x400000) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x4, 0x2000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) bind$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @reserved}, 0x10) semget(0x2, 0x2, 0x0) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000200)=""/148) socketpair(0x18, 0x2, 0xa7d5, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x7}) 12:40:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 290.841007] FAULT_INJECTION: forcing a failure. [ 290.841007] name failslab, interval 1, probability 0, space 0, times 0 [ 290.912594] CPU: 0 PID: 8934 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 290.919841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.929225] Call Trace: [ 290.931835] dump_stack+0x1c4/0x2b4 [ 290.935487] ? dump_stack_print_info.cold.2+0x52/0x52 [ 290.940711] should_fail.cold.4+0xa/0x17 [ 290.944809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 290.949934] ? graph_lock+0x170/0x170 [ 290.953747] ? save_stack+0x43/0xd0 [ 290.957384] ? kasan_kmalloc+0xc7/0xe0 [ 290.961280] ? __kmalloc_track_caller+0x14a/0x750 [ 290.966127] ? memdup_user+0x2c/0xa0 [ 290.969845] ? strndup_user+0x77/0xd0 [ 290.973656] ? graph_lock+0x170/0x170 [ 290.977469] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.982841] ? proc_fail_nth_write+0x9e/0x210 [ 290.987355] ? find_held_lock+0x36/0x1c0 [ 290.991477] ? ___might_sleep+0x1ed/0x300 [ 290.995639] ? arch_local_save_flags+0x40/0x40 [ 291.000234] ? lock_release+0x970/0x970 [ 291.004215] ? arch_local_save_flags+0x40/0x40 [ 291.008818] __should_failslab+0x124/0x180 [ 291.013068] should_failslab+0x9/0x14 [ 291.016876] __kmalloc_track_caller+0x2d0/0x750 [ 291.021562] ? strncpy_from_user+0x510/0x510 [ 291.025976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 291.031522] ? strndup_user+0x77/0xd0 [ 291.035335] memdup_user+0x2c/0xa0 [ 291.038897] strndup_user+0x77/0xd0 [ 291.042539] ksys_mount+0x73/0x140 [ 291.046097] __x64_sys_mount+0xbe/0x150 [ 291.050086] do_syscall_64+0x1b9/0x820 [ 291.053982] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 291.059355] ? syscall_return_slowpath+0x5e0/0x5e0 [ 291.064309] ? trace_hardirqs_on_caller+0x310/0x310 [ 291.069337] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 291.074374] ? recalc_sigpending_tsk+0x180/0x180 [ 291.079141] ? kasan_check_write+0x14/0x20 [ 291.083405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.088274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.093482] RIP: 0033:0x457569 [ 291.096683] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.115587] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 291.123312] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 [ 291.130586] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 291.137860] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 [ 291.145130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 291.152401] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000005 12:40:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000077000000978402bb908b84ed88e6ddfdc74df6448b6679a76bd4c25c41d154a51f2ca2409f55fde10dd920e389dbb17cba854bc4474cbf46fdacd6f28a0c7925063298d533aa5452080b7a55657d747d9492f313611a8254121f973e13fa90ddbb4318bf709eb5b60d0bb239eb386ccf13a7e5a4d258ae2c00d83b3a7d"]) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x7e}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x100000001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0xa60}, &(0x7f0000000200)=0x8) 12:40:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:05 executing program 3 (fault-call:1 fault-nth:2): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:05 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 291.462351] FAULT_INJECTION: forcing a failure. [ 291.462351] name failslab, interval 1, probability 0, space 0, times 0 [ 291.498071] CPU: 1 PID: 8951 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 291.505290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.514651] Call Trace: [ 291.517260] dump_stack+0x1c4/0x2b4 [ 291.520912] ? dump_stack_print_info.cold.2+0x52/0x52 [ 291.526143] should_fail.cold.4+0xa/0x17 [ 291.530220] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 291.535344] ? graph_lock+0x170/0x170 [ 291.539165] ? __kmalloc_track_caller+0x14a/0x750 [ 291.544019] ? memdup_user+0x2c/0xa0 [ 291.547738] ? strndup_user+0x77/0xd0 [ 291.551547] ? graph_lock+0x170/0x170 [ 291.555383] ? find_held_lock+0x36/0x1c0 [ 291.559488] ? ___might_sleep+0x1ed/0x300 [ 291.563647] ? arch_local_save_flags+0x40/0x40 [ 291.568234] ? lock_release+0x970/0x970 [ 291.572220] ? arch_local_save_flags+0x40/0x40 [ 291.576880] ? usercopy_warn+0x110/0x110 [ 291.580967] __should_failslab+0x124/0x180 [ 291.585217] should_failslab+0x9/0x14 [ 291.589027] kmem_cache_alloc_trace+0x2d7/0x750 [ 291.593714] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 291.599468] ? _copy_from_user+0xdf/0x150 [ 291.603636] copy_mount_options+0x5f/0x380 [ 291.607878] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 291.613427] ksys_mount+0xd0/0x140 [ 291.616984] __x64_sys_mount+0xbe/0x150 [ 291.620978] do_syscall_64+0x1b9/0x820 [ 291.624872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 291.630250] ? syscall_return_slowpath+0x5e0/0x5e0 [ 291.635184] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.640040] ? trace_hardirqs_on_caller+0x310/0x310 [ 291.645077] ? prepare_exit_to_usermode+0x291/0x3b0 [ 291.650109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.654977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.660175] RIP: 0033:0x457569 [ 291.663388] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.682296] RSP: 002b:00007f4978f71c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 291.690017] RAX: ffffffffffffffda RBX: 00007f4978f71c90 RCX: 0000000000457569 [ 291.697292] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 291.704565] RBP: 000000000072bf00 R08: 0000000020000340 R09: 0000000000000000 12:40:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 291.711837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f726d4 [ 291.719108] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:05 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:05 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x400, 0x20000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000005c0)={"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"}) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x6, 0x400000) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x4, 0x2000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) bind$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @reserved}, 0x10) semget(0x2, 0x2, 0x0) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000200)=""/148) socketpair(0x18, 0x2, 0xa7d5, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x7}) 12:40:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:06 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:06 executing program 3 (fault-call:1 fault-nth:3): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8e55}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000500)=""/224) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000340)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r3}, 0xc) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000340)) close(r1) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x2, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b6bc8fda04ae1bf1a1e4431ff3e4e210a9ad83a2709b87b524875076871471eb7b6e745475d5febe321ff3eb7a90f27b92d384bf15cacfa784201efd3d604b"}, 0xffffffffffffff15, &(0x7f0000000300)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000110, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000400)=0xee289c2066ffa0e) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000050c7b4bbba8551830000000000000000230000000000000000000000000000000000000000000400000000000000000000000000000000000000"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x3, 0x0, 0x58, 0x7}) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r5 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r5) 12:40:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:06 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 292.301164] FAULT_INJECTION: forcing a failure. [ 292.301164] name failslab, interval 1, probability 0, space 0, times 0 [ 292.353258] CPU: 1 PID: 8999 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 292.360497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.369854] Call Trace: [ 292.372464] dump_stack+0x1c4/0x2b4 [ 292.376121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 292.376162] should_fail.cold.4+0xa/0x17 [ 292.376189] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.390524] ? lock_downgrade+0x900/0x900 [ 292.390544] ? graph_lock+0x170/0x170 12:40:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_crypto(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84400200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@alg={0xf0, 0x10, 0x30, 0x70bd26, 0x25dfdbfd, {{'xts(aes)\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000001c0)) [ 292.390608] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 292.390628] ? kasan_check_read+0x11/0x20 [ 292.398571] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 292.398590] ? rcu_bh_qs+0xc0/0xc0 [ 292.398609] ? rcu_bh_qs+0xc0/0xc0 [ 292.398636] ? find_held_lock+0x36/0x1c0 [ 292.424992] ? ___might_sleep+0x1ed/0x300 [ 292.429162] ? arch_local_save_flags+0x40/0x40 [ 292.433759] __should_failslab+0x124/0x180 [ 292.437999] should_failslab+0x9/0x14 [ 292.441818] kmem_cache_alloc+0x2be/0x730 [ 292.446041] getname_flags+0xd0/0x5a0 [ 292.449863] user_path_at_empty+0x2d/0x50 [ 292.454032] do_mount+0x177/0x31f0 [ 292.457601] ? copy_mount_string+0x40/0x40 [ 292.461859] ? rcu_pm_notify+0xc0/0xc0 [ 292.465778] ? copy_mount_options+0x5f/0x380 [ 292.470202] ? rcu_read_lock_sched_held+0x108/0x120 [ 292.475235] ? kmem_cache_alloc_trace+0x353/0x750 [ 292.480101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 292.485662] ? _copy_from_user+0xdf/0x150 [ 292.489830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.495393] ? copy_mount_options+0x288/0x380 [ 292.499913] ksys_mount+0x12d/0x140 [ 292.503562] __x64_sys_mount+0xbe/0x150 [ 292.507558] do_syscall_64+0x1b9/0x820 [ 292.511460] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 292.516847] ? syscall_return_slowpath+0x5e0/0x5e0 [ 292.521788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.526651] ? trace_hardirqs_on_caller+0x310/0x310 [ 292.531683] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 292.536720] ? prepare_exit_to_usermode+0x291/0x3b0 [ 292.541759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.546632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.551831] RIP: 0033:0x457569 [ 292.555035] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.573949] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.581681] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 [ 292.588957] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 292.596235] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 12:40:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000100)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) accept(r2, &(0x7f0000000480)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) tkill(r1, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x20) r4 = dup2(r2, r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000040)={0x6, 0x1f, 0x5, 0x1, 0x100000001}) 12:40:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 292.603517] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 292.610792] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000005 12:40:06 executing program 3 (fault-call:1 fault-nth:4): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/4096, 0x0, 0x1000, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8e55}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000500)=""/224) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000340)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r3}, 0xc) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000340)) close(r1) socket$kcm(0x2, 0x0, 0x2) socket$kcm(0x2, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b6bc8fda04ae1bf1a1e4431ff3e4e210a9ad83a2709b87b524875076871471eb7b6e745475d5febe321ff3eb7a90f27b92d384bf15cacfa784201efd3d604b"}, 0xffffffffffffff15, &(0x7f0000000300)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000110, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000400)=0xee289c2066ffa0e) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000050c7b4bbba8551830000000000000000230000000000000000000000000000000000000000000400000000000000000000000000000000000000"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x3, 0x0, 0x58, 0x7}) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r5 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r5) 12:40:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:06 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x34}]}) 12:40:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 293.001561] FAULT_INJECTION: forcing a failure. [ 293.001561] name failslab, interval 1, probability 0, space 0, times 0 [ 293.043182] CPU: 0 PID: 9045 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 293.050400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.059771] Call Trace: [ 293.062394] dump_stack+0x1c4/0x2b4 [ 293.066057] ? dump_stack_print_info.cold.2+0x52/0x52 [ 293.071285] should_fail.cold.4+0xa/0x17 [ 293.075377] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 293.080510] ? graph_lock+0x170/0x170 [ 293.084330] ? print_usage_bug+0xc0/0xc0 [ 293.084410] ? graph_lock+0x170/0x170 [ 293.092409] ? graph_lock+0x170/0x170 [ 293.092438] ? find_held_lock+0x36/0x1c0 [ 293.092460] ? __lock_is_held+0xb5/0x140 [ 293.092493] ? ___might_sleep+0x1ed/0x300 [ 293.092513] ? arch_local_save_flags+0x40/0x40 [ 293.092544] __should_failslab+0x124/0x180 [ 293.100397] should_failslab+0x9/0x14 [ 293.100417] kmem_cache_alloc+0x2be/0x730 [ 293.100442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.100524] ? check_preemption_disabled+0x48/0x200 [ 293.100548] __d_alloc+0xc8/0xcc0 [ 293.113319] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 293.113334] ? __lock_acquire+0x7ec/0x4ec0 [ 293.113351] ? perf_trace_lock+0x7a0/0x7a0 [ 293.113383] ? print_usage_bug+0xc0/0xc0 [ 293.113409] ? mark_held_locks+0x130/0x130 [ 293.161296] ? debug_smp_processor_id+0x1c/0x20 [ 293.165975] ? perf_trace_lock_acquire+0x15b/0x800 [ 293.170936] d_alloc+0x96/0x380 [ 293.174232] ? __d_alloc+0xcc0/0xcc0 [ 293.177973] d_alloc_parallel+0x15a/0x1f40 [ 293.182224] ? perf_trace_lock+0x7a0/0x7a0 [ 293.186472] ? __lock_acquire+0x7ec/0x4ec0 [ 293.190723] ? graph_lock+0x170/0x170 [ 293.194542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.200481] ? __d_lookup_rcu+0xaa0/0xaa0 [ 293.204641] ? debug_smp_processor_id+0x1c/0x20 [ 293.209329] ? perf_trace_lock_acquire+0x15b/0x800 [ 293.214288] ? perf_trace_lock+0x7a0/0x7a0 [ 293.218536] ? __d_lookup+0x591/0x9e0 [ 293.222348] ? lock_downgrade+0x900/0x900 [ 293.226511] ? check_preemption_disabled+0x48/0x200 [ 293.231545] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 293.237351] ? kasan_check_read+0x11/0x20 [ 293.241519] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 293.246804] ? rcu_bh_qs+0xc0/0xc0 [ 293.250360] ? __lockdep_init_map+0x105/0x590 [ 293.254880] ? __lockdep_init_map+0x105/0x590 [ 293.259393] ? lockdep_init_map+0x9/0x10 [ 293.263471] ? __init_waitqueue_head+0x9e/0x150 [ 293.268149] ? init_wait_entry+0x1c0/0x1c0 [ 293.272416] __lookup_slow+0x1e6/0x540 [ 293.276322] ? vfs_unlink+0x510/0x510 [ 293.280147] ? down_read+0xb0/0x1d0 [ 293.283773] ? lookup_slow+0x49/0x80 [ 293.287498] ? __down_interruptible+0x700/0x700 [ 293.292170] ? lookup_fast+0x470/0x12a0 [ 293.296159] ? __follow_mount_rcu.isra.33.part.34+0x890/0x890 [ 293.302059] lookup_slow+0x57/0x80 [ 293.305606] walk_component+0x92b/0x25c0 [ 293.309675] ? inode_permission+0xb2/0x560 [ 293.313925] ? path_init+0x1ed0/0x1ed0 [ 293.317836] ? walk_component+0x25c0/0x25c0 [ 293.322190] ? save_stack+0xa9/0xd0 [ 293.325830] ? kasan_slab_alloc+0x12/0x20 [ 293.330097] ? kmem_cache_alloc+0x12e/0x730 [ 293.334428] ? getname_flags+0xd0/0x5a0 [ 293.338409] ? user_path_at_empty+0x2d/0x50 [ 293.342754] path_lookupat.isra.43+0x212/0xc00 [ 293.347345] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 293.352556] ? path_parentat.isra.41+0x160/0x160 [ 293.357327] ? usercopy_warn+0x110/0x110 [ 293.361415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.366965] ? check_preemption_disabled+0x48/0x200 [ 293.372000] filename_lookup+0x26a/0x520 [ 293.376075] ? filename_parentat.isra.56+0x570/0x570 [ 293.381189] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.386748] ? digsig_verify+0x1530/0x1530 [ 293.390995] ? kmem_cache_alloc+0x33a/0x730 [ 293.395338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.400923] ? getname_flags+0x26e/0x5a0 [ 293.405011] user_path_at_empty+0x40/0x50 [ 293.409169] do_mount+0x177/0x31f0 [ 293.412725] ? copy_mount_string+0x40/0x40 [ 293.416972] ? rcu_pm_notify+0xc0/0xc0 [ 293.420881] ? copy_mount_options+0x5f/0x380 [ 293.425296] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.430322] ? kmem_cache_alloc_trace+0x353/0x750 [ 293.435180] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.440726] ? _copy_from_user+0xdf/0x150 [ 293.444891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.450444] ? copy_mount_options+0x288/0x380 [ 293.454950] ksys_mount+0x12d/0x140 [ 293.458587] __x64_sys_mount+0xbe/0x150 [ 293.462575] do_syscall_64+0x1b9/0x820 [ 293.466472] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 293.471852] ? syscall_return_slowpath+0x5e0/0x5e0 [ 293.476794] ? trace_hardirqs_on_caller+0x310/0x310 [ 293.481823] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 293.486846] ? recalc_sigpending_tsk+0x180/0x180 [ 293.491610] ? kasan_check_write+0x14/0x20 [ 293.495857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.500719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.505912] RIP: 0033:0x457569 [ 293.509114] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.528018] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.535737] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 12:40:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000013, 0x0) 12:40:07 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) [ 293.543008] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 293.550278] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 [ 293.557550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 293.564820] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:07 executing program 3 (fault-call:1 fault-nth:5): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 293.711300] autofs4:pid:9063:autofs_fill_super: called with bogus options 12:40:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000000040)='1', 0x1}], 0x1) [ 293.772852] autofs4:pid:9070:autofs_fill_super: called with bogus options 12:40:07 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) 12:40:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 293.960438] autofs4:pid:9086:autofs_fill_super: called with bogus options 12:40:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x77, 0x0, [0xcd]}) 12:40:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:08 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) 12:40:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x9, 0x2000, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 12:40:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 294.209126] autofs4:pid:9098:autofs_fill_super: called with bogus options 12:40:08 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), 0x8) [ 294.272761] FAULT_INJECTION: forcing a failure. [ 294.272761] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 294.284618] CPU: 0 PID: 9109 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 294.291819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.301171] Call Trace: [ 294.303772] dump_stack+0x1c4/0x2b4 [ 294.307434] ? dump_stack_print_info.cold.2+0x52/0x52 [ 294.312649] should_fail.cold.4+0xa/0x17 [ 294.316725] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.321836] ? check_preemption_disabled+0x48/0x200 [ 294.326864] ? debug_smp_processor_id+0x1c/0x20 [ 294.331542] ? perf_trace_lock_acquire+0x15b/0x800 [ 294.336484] ? mark_held_locks+0x130/0x130 [ 294.340721] ? perf_trace_lock+0x7a0/0x7a0 [ 294.344957] ? print_usage_bug+0xc0/0xc0 [ 294.349029] ? graph_lock+0x170/0x170 [ 294.352836] ? print_usage_bug+0xc0/0xc0 [ 294.356906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.362450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.367993] ? check_preemption_disabled+0x48/0x200 [ 294.373021] ? debug_smp_processor_id+0x1c/0x20 [ 294.377696] ? perf_trace_lock_acquire+0x15b/0x800 [ 294.382635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.388177] ? should_fail+0x22d/0xd01 [ 294.392075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.397254] __alloc_pages_nodemask+0x34b/0xde0 [ 294.401938] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 294.407735] ? kasan_check_read+0x11/0x20 [ 294.411893] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 294.416913] ? rcu_bh_qs+0xc0/0xc0 [ 294.420471] ? find_held_lock+0x36/0x1c0 [ 294.424562] ? ___might_sleep+0x1ed/0x300 [ 294.428717] ? trace_hardirqs_off+0xb8/0x310 [ 294.433140] cache_grow_begin+0x91/0x8c0 [ 294.437209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 294.442757] ? check_preemption_disabled+0x48/0x200 [ 294.447785] kmem_cache_alloc+0x665/0x730 [ 294.451983] getname_flags+0xd0/0x5a0 [ 294.455796] user_path_at_empty+0x2d/0x50 [ 294.459954] do_mount+0x177/0x31f0 [ 294.463506] ? copy_mount_string+0x40/0x40 [ 294.467748] ? rcu_pm_notify+0xc0/0xc0 [ 294.471649] ? copy_mount_options+0x5f/0x380 [ 294.476060] ? rcu_read_lock_sched_held+0x108/0x120 [ 294.481082] ? kmem_cache_alloc_trace+0x353/0x750 [ 294.485932] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 294.491482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.497020] ? copy_mount_options+0x288/0x380 [ 294.501525] ksys_mount+0x12d/0x140 [ 294.505160] __x64_sys_mount+0xbe/0x150 [ 294.509143] do_syscall_64+0x1b9/0x820 [ 294.513039] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 294.518407] ? syscall_return_slowpath+0x5e0/0x5e0 [ 294.523349] ? trace_hardirqs_on_caller+0x310/0x310 [ 294.528383] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 294.533407] ? recalc_sigpending_tsk+0x180/0x180 [ 294.538169] ? kasan_check_write+0x14/0x20 [ 294.542418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.547284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.552475] RIP: 0033:0x457569 12:40:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x1}, 0x50) unlink(&(0x7f0000000000)='./file0/file0\x00') read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000000000000000080000900000000000000b00000000000000656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000004000000000000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246367726f75701500000000"], 0x90) [ 294.555676] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.574577] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.582295] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 [ 294.589563] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 294.596832] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 [ 294.604105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 294.611397] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 [ 294.677758] autofs4:pid:9117:autofs_fill_super: called with bogus options 12:40:08 executing program 3 (fault-call:1 fault-nth:6): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:08 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) 12:40:08 executing program 4: 12:40:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:08 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:08 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) [ 294.814237] autofs4:pid:9130:autofs_fill_super: called with bogus options 12:40:08 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 294.884487] FAULT_INJECTION: forcing a failure. [ 294.884487] name failslab, interval 1, probability 0, space 0, times 0 [ 294.931978] CPU: 1 PID: 9139 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 294.939212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.948578] Call Trace: [ 294.951198] dump_stack+0x1c4/0x2b4 [ 294.954857] ? dump_stack_print_info.cold.2+0x52/0x52 [ 294.960089] should_fail.cold.4+0xa/0x17 [ 294.964172] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.969290] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 294.974415] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 294.979547] ? lockdep_hardirqs_on+0x421/0x5c0 [ 294.984144] ? graph_lock+0x170/0x170 [ 294.987969] ? trace_hardirqs_on+0xbd/0x310 [ 294.992303] ? kasan_check_read+0x11/0x20 [ 294.996464] ? ida_alloc_range+0x51e/0xad0 [ 295.000729] ? find_held_lock+0x36/0x1c0 [ 295.002459] autofs4:pid:9147:autofs_fill_super: called with bogus options [ 295.004825] ? ___might_sleep+0x1ed/0x300 [ 295.004847] ? arch_local_save_flags+0x40/0x40 [ 295.004879] __should_failslab+0x124/0x180 [ 295.004901] should_failslab+0x9/0x14 [ 295.028566] __kmalloc_track_caller+0x2d0/0x750 [ 295.032831] 9pnet: Insufficient options for proto=fd [ 295.033256] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.033276] ? kstrdup_const+0x66/0x80 [ 295.033299] kstrdup+0x39/0x70 [ 295.033319] kstrdup_const+0x66/0x80 [ 295.033341] alloc_vfsmnt+0x186/0x990 [ 295.058020] ? m_stop+0x20/0x20 [ 295.061314] ? graph_lock+0x170/0x170 [ 295.065123] ? rcu_pm_notify+0xc0/0xc0 [ 295.069016] ? putname+0xf2/0x130 [ 295.072489] ? find_held_lock+0x36/0x1c0 [ 295.076564] ? __get_fs_type+0x97/0xc0 [ 295.080457] ? lock_downgrade+0x900/0x900 [ 295.084610] ? lock_release+0x970/0x970 [ 295.088596] ? digsig_verify+0x1530/0x1530 [ 295.092847] vfs_kern_mount.part.35+0x90/0x4f0 [ 295.097439] ? may_umount+0xb0/0xb0 [ 295.101075] ? _raw_read_unlock+0x2c/0x50 [ 295.105225] ? __get_fs_type+0x97/0xc0 [ 295.109124] do_mount+0x581/0x31f0 [ 295.112676] ? copy_mount_string+0x40/0x40 [ 295.116933] ? copy_mount_options+0x5f/0x380 [ 295.121345] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.126381] ? kmem_cache_alloc_trace+0x353/0x750 [ 295.131235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 295.136778] ? _copy_from_user+0xdf/0x150 [ 295.140940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.146480] ? copy_mount_options+0x288/0x380 [ 295.150984] ksys_mount+0x12d/0x140 [ 295.154620] __x64_sys_mount+0xbe/0x150 [ 295.158606] do_syscall_64+0x1b9/0x820 [ 295.162503] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 295.167871] ? syscall_return_slowpath+0x5e0/0x5e0 [ 295.172812] ? trace_hardirqs_on_caller+0x310/0x310 [ 295.177833] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 295.182853] ? recalc_sigpending_tsk+0x180/0x180 [ 295.187612] ? kasan_check_write+0x14/0x20 [ 295.191860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.196720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.202089] RIP: 0033:0x457569 [ 295.205291] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.224195] RSP: 002b:00007f4978f71c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 12:40:09 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 295.231913] RAX: ffffffffffffffda RBX: 00007f4978f71c90 RCX: 0000000000457569 [ 295.239189] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 295.246458] RBP: 000000000072bf00 R08: 0000000020000340 R09: 0000000000000000 [ 295.253730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f726d4 [ 295.261001] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:09 executing program 4: socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) [ 295.289057] 9pnet: Insufficient options for proto=fd 12:40:09 executing program 3 (fault-call:1 fault-nth:7): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:09 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 295.363401] autofs4:pid:9156:autofs_fill_super: called with bogus options [ 295.438457] FAULT_INJECTION: forcing a failure. [ 295.438457] name failslab, interval 1, probability 0, space 0, times 0 [ 295.492818] autofs4:pid:9172:autofs_fill_super: called with bogus options [ 295.507591] CPU: 0 PID: 9167 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 295.514815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.524180] Call Trace: [ 295.526785] dump_stack+0x1c4/0x2b4 [ 295.530436] ? dump_stack_print_info.cold.2+0x52/0x52 [ 295.535655] should_fail.cold.4+0xa/0x17 [ 295.539726] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 295.544835] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 295.549941] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 295.555057] ? lockdep_hardirqs_on+0x421/0x5c0 [ 295.559642] ? graph_lock+0x170/0x170 [ 295.563455] ? trace_hardirqs_on+0xbd/0x310 [ 295.567811] ? kasan_check_read+0x11/0x20 [ 295.571987] ? ida_alloc_range+0x51e/0xad0 [ 295.576241] ? find_held_lock+0x36/0x1c0 [ 295.580329] ? ___might_sleep+0x1ed/0x300 [ 295.584483] ? arch_local_save_flags+0x40/0x40 [ 295.589083] __should_failslab+0x124/0x180 [ 295.593327] should_failslab+0x9/0x14 [ 295.597135] __kmalloc_track_caller+0x2d0/0x750 [ 295.601819] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.606842] ? kstrdup_const+0x66/0x80 [ 295.610737] kstrdup+0x39/0x70 [ 295.613937] kstrdup_const+0x66/0x80 [ 295.617660] alloc_vfsmnt+0x186/0x990 [ 295.621465] ? m_stop+0x20/0x20 [ 295.624758] ? graph_lock+0x170/0x170 [ 295.628565] ? rcu_pm_notify+0xc0/0xc0 [ 295.632465] ? putname+0xf2/0x130 [ 295.635934] ? find_held_lock+0x36/0x1c0 [ 295.640010] ? __get_fs_type+0x97/0xc0 [ 295.643905] ? lock_downgrade+0x900/0x900 [ 295.648058] ? lock_release+0x970/0x970 [ 295.652042] ? digsig_verify+0x1530/0x1530 [ 295.656290] vfs_kern_mount.part.35+0x90/0x4f0 [ 295.660882] ? may_umount+0xb0/0xb0 [ 295.664515] ? _raw_read_unlock+0x2c/0x50 [ 295.668671] ? __get_fs_type+0x97/0xc0 [ 295.672568] do_mount+0x581/0x31f0 [ 295.676123] ? copy_mount_string+0x40/0x40 [ 295.680382] ? copy_mount_options+0x5f/0x380 [ 295.684804] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.689824] ? kmem_cache_alloc_trace+0x353/0x750 [ 295.694679] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 295.700231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.705770] ? copy_mount_options+0x288/0x380 [ 295.710278] ksys_mount+0x12d/0x140 [ 295.713917] __x64_sys_mount+0xbe/0x150 [ 295.717901] do_syscall_64+0x1b9/0x820 [ 295.721792] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 295.727168] ? syscall_return_slowpath+0x5e0/0x5e0 [ 295.732105] ? trace_hardirqs_on_caller+0x310/0x310 [ 295.737131] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 295.742151] ? recalc_sigpending_tsk+0x180/0x180 [ 295.746910] ? kasan_check_write+0x14/0x20 [ 295.751159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.756019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.761214] RIP: 0033:0x457569 [ 295.764415] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.783332] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.791069] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 [ 295.798337] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 295.805618] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 [ 295.812889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 295.820158] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000005 12:40:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x1}, 0x50) unlink(&(0x7f0000000000)='./file0/file0\x00') read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000000000000000080000900000000000000b00000000000000656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000004000000000000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246367726f75701500000000"], 0x90) 12:40:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x2d3, 0x0, 0x0, 0x0, "12040608476b7ddcf0ac09b44134860951ec720e6319f1fc5857dc354706c652"}) 12:40:09 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:09 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:09 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 295.914282] autofs4:pid:9184:autofs_fill_super: called with bogus options 12:40:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:10 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='./file1/file0\x00') rmdir(&(0x7f0000000000)='./file1\x00') unlink(&(0x7f00000000c0)='./file1/file0\x00') 12:40:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 296.017233] autofs4:pid:9195:autofs_fill_super: called with bogus options 12:40:10 executing program 3 (fault-call:1 fault-nth:8): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 296.071243] 9pnet: Insufficient options for proto=fd 12:40:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 296.225767] autofs4:pid:9213:autofs_fill_super: called with bogus options [ 296.230137] 9pnet: Insufficient options for proto=fd [ 296.383459] FAULT_INJECTION: forcing a failure. [ 296.383459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.404207] CPU: 1 PID: 9222 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 296.411516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.420885] Call Trace: [ 296.423507] dump_stack+0x1c4/0x2b4 [ 296.427166] ? dump_stack_print_info.cold.2+0x52/0x52 [ 296.432396] ? debug_smp_processor_id+0x1c/0x20 [ 296.437087] ? perf_trace_lock_acquire+0x15b/0x800 [ 296.442045] should_fail.cold.4+0xa/0x17 [ 296.446128] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 296.451255] ? graph_lock+0x170/0x170 [ 296.455082] ? pcpu_balance_workfn+0x16f0/0x16f0 [ 296.459864] ? find_held_lock+0x36/0x1c0 [ 296.464026] ? hash_mac4_uadt+0x610/0x640 [ 296.468207] ? ___might_sleep+0x1ed/0x300 [ 296.472387] ? lock_release+0x970/0x970 [ 296.476386] ? arch_local_save_flags+0x40/0x40 [ 296.480999] ? __might_sleep+0x95/0x190 [ 296.485000] __alloc_pages_nodemask+0x34b/0xde0 [ 296.489697] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 296.494738] ? graph_lock+0x170/0x170 [ 296.498556] ? rcu_pm_notify+0xc0/0xc0 [ 296.502477] ? find_held_lock+0x36/0x1c0 [ 296.506561] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 296.512121] alloc_pages_current+0x10c/0x210 [ 296.516548] get_zeroed_page+0x14/0x50 [ 296.520453] mount_fs+0x20e/0x31d [ 296.523921] ? digsig_verify+0x1530/0x1530 [ 296.528190] vfs_kern_mount.part.35+0xdc/0x4f0 [ 296.532792] ? may_umount+0xb0/0xb0 [ 296.536437] ? _raw_read_unlock+0x2c/0x50 [ 296.540601] ? __get_fs_type+0x97/0xc0 [ 296.544507] do_mount+0x581/0x31f0 [ 296.548074] ? copy_mount_string+0x40/0x40 [ 296.552331] ? copy_mount_options+0x5f/0x380 [ 296.556768] ? rcu_read_lock_sched_held+0x108/0x120 [ 296.561803] ? kmem_cache_alloc_trace+0x353/0x750 [ 296.566663] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 296.572219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.577771] ? copy_mount_options+0x288/0x380 [ 296.582283] ksys_mount+0x12d/0x140 [ 296.585935] __x64_sys_mount+0xbe/0x150 [ 296.589939] do_syscall_64+0x1b9/0x820 [ 296.593840] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 296.599220] ? syscall_return_slowpath+0x5e0/0x5e0 [ 296.604157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.609014] ? trace_hardirqs_on_caller+0x310/0x310 [ 296.614048] ? prepare_exit_to_usermode+0x291/0x3b0 [ 296.619090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.623962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.629163] RIP: 0033:0x457569 [ 296.632382] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.651300] RSP: 002b:00007f4978f71c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.659031] RAX: ffffffffffffffda RBX: 00007f4978f71c90 RCX: 0000000000457569 [ 296.666315] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 296.673593] RBP: 000000000072bf00 R08: 0000000020000340 R09: 0000000000000000 [ 296.680870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f726d4 [ 296.688149] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9eca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x0, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:10 executing program 3 (fault-call:1 fault-nth:9): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x0, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 296.812763] autofs4:pid:9236:autofs_fill_super: called with bogus options [ 296.829630] FAULT_INJECTION: forcing a failure. [ 296.829630] name failslab, interval 1, probability 0, space 0, times 0 [ 296.858175] CPU: 0 PID: 9238 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 296.865412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.874777] Call Trace: [ 296.874808] dump_stack+0x1c4/0x2b4 [ 296.874836] ? dump_stack_print_info.cold.2+0x52/0x52 [ 296.874873] should_fail.cold.4+0xa/0x17 [ 296.881196] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 296.881223] ? graph_lock+0x170/0x170 [ 296.881238] ? perf_trace_lock+0x7a0/0x7a0 [ 296.881257] ? graph_lock+0x170/0x170 [ 296.881274] ? save_stack+0x43/0xd0 [ 296.881291] ? kasan_kmalloc+0xc7/0xe0 [ 296.890528] ? kmem_cache_alloc_trace+0x152/0x750 [ 296.890544] ? sget+0x10b/0x150 [ 296.890566] ? find_held_lock+0x36/0x1c0 [ 296.890588] ? __lock_is_held+0xb5/0x140 [ 296.890621] ? ___might_sleep+0x1ed/0x300 [ 296.890644] ? arch_local_save_flags+0x40/0x40 [ 296.907557] ? lock_release+0x970/0x970 [ 296.915062] __should_failslab+0x124/0x180 [ 296.915086] should_failslab+0x9/0x14 [ 296.915105] kmem_cache_alloc_trace+0x2d7/0x750 [ 296.915127] ? down_write_nested+0x8e/0x130 [ 296.915223] smack_sb_alloc_security+0x49/0x160 [ 296.965770] security_sb_alloc+0x4c/0xa0 [ 296.969856] sget_userns+0x2ed/0xf10 [ 296.973584] ? get_anon_bdev+0xc0/0xc0 [ 296.977497] ? destroy_unused_super.part.10+0x110/0x110 [ 296.982876] ? trace_hardirqs_off+0x310/0x310 [ 296.987415] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.992201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.997750] ? cap_capable+0x1f9/0x260 [ 297.001657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.007209] ? security_capable+0x99/0xc0 [ 297.011386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.016942] ? ns_capable_common+0x13f/0x170 [ 297.021375] ? get_anon_bdev+0xc0/0xc0 [ 297.025276] sget+0x10b/0x150 [ 297.028485] ? ovl_show_options+0x550/0x550 [ 297.032836] mount_nodev+0x33/0x110 [ 297.036481] ovl_mount+0x2c/0x40 [ 297.039856] mount_fs+0xae/0x31d [ 297.043247] vfs_kern_mount.part.35+0xdc/0x4f0 [ 297.047850] ? may_umount+0xb0/0xb0 [ 297.051488] ? _raw_read_unlock+0x2c/0x50 [ 297.055648] ? __get_fs_type+0x97/0xc0 [ 297.059554] do_mount+0x581/0x31f0 [ 297.063117] ? copy_mount_string+0x40/0x40 [ 297.067391] ? copy_mount_options+0x5f/0x380 [ 297.071818] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.076852] ? kmem_cache_alloc_trace+0x353/0x750 [ 297.081723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.087278] ? copy_mount_options+0x288/0x380 [ 297.091789] ksys_mount+0x12d/0x140 [ 297.095431] __x64_sys_mount+0xbe/0x150 [ 297.099418] do_syscall_64+0x1b9/0x820 [ 297.103319] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 297.108694] ? syscall_return_slowpath+0x5e0/0x5e0 [ 297.113636] ? trace_hardirqs_on_caller+0x310/0x310 [ 297.118658] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 297.123680] ? recalc_sigpending_tsk+0x180/0x180 [ 297.128446] ? kasan_check_write+0x14/0x20 [ 297.132692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.137578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.142771] RIP: 0033:0x457569 12:40:11 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 297.145970] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.164877] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.172597] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 [ 297.179866] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 297.187133] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 [ 297.194403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 297.202121] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000005 [ 297.243963] autofs4:pid:9248:autofs_fill_super: called with bogus options 12:40:11 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 12:40:11 executing program 1: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:11 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 297.547677] autofs4:pid:9266:autofs_fill_super: called with bogus options 12:40:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:11 executing program 1: syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={r0}) 12:40:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x6, 0x61}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 12:40:11 executing program 3 (fault-call:1 fault-nth:10): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 297.812415] FAULT_INJECTION: forcing a failure. [ 297.812415] name failslab, interval 1, probability 0, space 0, times 0 [ 297.842800] CPU: 1 PID: 9282 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 297.850027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.859392] Call Trace: [ 297.861997] dump_stack+0x1c4/0x2b4 [ 297.865646] ? dump_stack_print_info.cold.2+0x52/0x52 [ 297.870863] should_fail.cold.4+0xa/0x17 [ 297.874941] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 297.880057] ? perf_trace_lock_acquire+0x15b/0x800 [ 297.884997] ? check_preemption_disabled+0x48/0x200 [ 297.890023] ? graph_lock+0x170/0x170 [ 297.893853] ? find_held_lock+0x36/0x1c0 [ 297.897944] ? ___might_sleep+0x1ed/0x300 [ 297.902103] ? arch_local_save_flags+0x40/0x40 [ 297.906691] ? sget_userns+0x1a9/0xf10 [ 297.910596] __should_failslab+0x124/0x180 [ 297.914845] should_failslab+0x9/0x14 [ 297.918651] kmem_cache_alloc_trace+0x2d7/0x750 [ 297.923328] ? kasan_check_write+0x14/0x20 [ 297.927569] ? do_raw_spin_lock+0xc1/0x200 [ 297.931817] sget_userns+0x1cf/0xf10 [ 297.935551] ? get_anon_bdev+0xc0/0xc0 [ 297.939453] ? destroy_unused_super.part.10+0x110/0x110 [ 297.944825] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.949868] ? graph_lock+0x170/0x170 [ 297.953678] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.959219] ? cap_capable+0x1f9/0x260 [ 297.963121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.968665] ? security_capable+0x99/0xc0 [ 297.972824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.978372] ? ns_capable_common+0x13f/0x170 [ 297.982788] ? get_anon_bdev+0xc0/0xc0 [ 297.986681] sget+0x10b/0x150 [ 297.989797] ? ovl_show_options+0x550/0x550 [ 297.994126] mount_nodev+0x33/0x110 [ 297.997761] ovl_mount+0x2c/0x40 [ 298.001131] mount_fs+0xae/0x31d [ 298.004514] vfs_kern_mount.part.35+0xdc/0x4f0 [ 298.009109] ? may_umount+0xb0/0xb0 [ 298.012741] ? _raw_read_unlock+0x2c/0x50 [ 298.016892] ? __get_fs_type+0x97/0xc0 [ 298.020792] do_mount+0x581/0x31f0 [ 298.024344] ? copy_mount_string+0x40/0x40 [ 298.028602] ? copy_mount_options+0x5f/0x380 [ 298.033020] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.038043] ? kmem_cache_alloc_trace+0x353/0x750 [ 298.042895] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.048446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.053992] ? copy_mount_options+0x288/0x380 [ 298.058497] ksys_mount+0x12d/0x140 [ 298.062132] __x64_sys_mount+0xbe/0x150 [ 298.066117] do_syscall_64+0x1b9/0x820 [ 298.070009] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 298.075390] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.080330] ? trace_hardirqs_on_caller+0x310/0x310 [ 298.085372] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 298.090405] ? recalc_sigpending_tsk+0x180/0x180 [ 298.095183] ? kasan_check_write+0x14/0x20 [ 298.099436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.104304] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.109502] RIP: 0033:0x457569 [ 298.112701] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.131694] RSP: 002b:00007f4978f71c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.139413] RAX: ffffffffffffffda RBX: 00007f4978f71c90 RCX: 0000000000457569 [ 298.146772] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 298.154047] RBP: 000000000072bf00 R08: 0000000020000340 R09: 0000000000000000 12:40:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:12 executing program 1: syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={r0}) [ 298.161318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f726d4 [ 298.168587] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000680)={0x3, 0x0, &(0x7f0000000600)}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 12:40:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/56, 0x38) 12:40:12 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x3, 0x0) epoll_create(0x31) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x40) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) 12:40:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb3"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:12 executing program 3 (fault-call:1 fault-nth:11): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:12 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 298.582762] FAULT_INJECTION: forcing a failure. [ 298.582762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.594620] CPU: 0 PID: 9323 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #61 [ 298.601820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.611184] Call Trace: [ 298.613793] dump_stack+0x1c4/0x2b4 [ 298.617452] ? dump_stack_print_info.cold.2+0x52/0x52 [ 298.622666] ? __lock_acquire+0x7ec/0x4ec0 [ 298.626953] should_fail.cold.4+0xa/0x17 [ 298.631047] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.636172] ? mark_held_locks+0x130/0x130 [ 298.640418] ? print_usage_bug+0xc0/0xc0 [ 298.644515] ? mark_held_locks+0x130/0x130 [ 298.648767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.654323] ? check_preemption_disabled+0x48/0x200 [ 298.659372] ? mark_held_locks+0x130/0x130 [ 298.663617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.663635] ? check_preemption_disabled+0x48/0x200 [ 298.663659] ? debug_smp_processor_id+0x1c/0x20 12:40:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb30000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 298.663674] ? perf_trace_lock_acquire+0x15b/0x800 [ 298.663693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.663715] ? should_fail+0x22d/0xd01 [ 298.693261] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.698407] __alloc_pages_nodemask+0x34b/0xde0 [ 298.703109] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 298.708156] ? find_held_lock+0x36/0x1c0 [ 298.712251] ? ___might_sleep+0x1ed/0x300 [ 298.712278] ? trace_hardirqs_off+0xb8/0x310 [ 298.720836] cache_grow_begin+0x91/0x8c0 [ 298.724906] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.730467] ? check_preemption_disabled+0x48/0x200 [ 298.735509] kmem_cache_alloc_trace+0x67e/0x750 [ 298.740189] ? kasan_check_write+0x14/0x20 [ 298.744445] ? do_raw_spin_lock+0xc1/0x200 [ 298.748699] sget_userns+0x1cf/0xf10 [ 298.752417] ? get_anon_bdev+0xc0/0xc0 [ 298.756326] ? destroy_unused_super.part.10+0x110/0x110 [ 298.761700] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.766749] ? graph_lock+0x170/0x170 [ 298.770559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.776102] ? cap_capable+0x1f9/0x260 [ 298.780008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.785555] ? security_capable+0x99/0xc0 [ 298.789716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.795259] ? ns_capable_common+0x13f/0x170 [ 298.799680] ? get_anon_bdev+0xc0/0xc0 [ 298.803575] sget+0x10b/0x150 [ 298.806694] ? ovl_show_options+0x550/0x550 [ 298.811024] mount_nodev+0x33/0x110 [ 298.814665] ovl_mount+0x2c/0x40 [ 298.818041] mount_fs+0xae/0x31d [ 298.821435] vfs_kern_mount.part.35+0xdc/0x4f0 [ 298.826033] ? may_umount+0xb0/0xb0 [ 298.829671] ? _raw_read_unlock+0x2c/0x50 [ 298.833827] ? __get_fs_type+0x97/0xc0 [ 298.837731] do_mount+0x581/0x31f0 [ 298.841287] ? copy_mount_string+0x40/0x40 [ 298.845542] ? copy_mount_options+0x5f/0x380 [ 298.849963] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.854995] ? kmem_cache_alloc_trace+0x353/0x750 [ 298.859854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.865410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.870957] ? copy_mount_options+0x288/0x380 [ 298.875466] ksys_mount+0x12d/0x140 [ 298.879108] __x64_sys_mount+0xbe/0x150 [ 298.883102] do_syscall_64+0x1b9/0x820 [ 298.887017] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 298.892399] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.897345] ? trace_hardirqs_on_caller+0x310/0x310 [ 298.902389] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 298.907428] ? recalc_sigpending_tsk+0x180/0x180 [ 298.912193] ? kasan_check_write+0x14/0x20 [ 298.916447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.921307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.926501] RIP: 0033:0x457569 [ 298.929704] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.948609] RSP: 002b:00007f4978f50c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.956326] RAX: ffffffffffffffda RBX: 00007f4978f50c90 RCX: 0000000000457569 [ 298.963601] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000404000 [ 298.970874] RBP: 000000000072bfa0 R08: 0000000020000340 R09: 0000000000000000 [ 298.978146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4978f516d4 [ 298.985418] R13: 00000000004c2916 R14: 00000000004d3d68 R15: 0000000000000003 12:40:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:13 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 299.224263] overlayfs: missing 'lowerdir' 12:40:13 executing program 3 (fault-call:1 fault-nth:12): syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:13 executing program 4 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:13 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) 12:40:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:13 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:13 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:13 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) [ 299.783277] autofs4:pid:9366:autofs_fill_super: called with bogus options [ 299.793485] FAULT_INJECTION: forcing a failure. [ 299.793485] name failslab, interval 1, probability 0, space 0, times 0 [ 299.807381] overlayfs: missing 'lowerdir' [ 299.861558] CPU: 1 PID: 9375 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #61 [ 299.868782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.868793] Call Trace: [ 299.880746] dump_stack+0x1c4/0x2b4 [ 299.884407] ? dump_stack_print_info.cold.2+0x52/0x52 [ 299.889628] should_fail.cold.4+0xa/0x17 [ 299.893705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 299.898826] ? graph_lock+0x170/0x170 [ 299.902644] ? __f_unlock_pos+0x19/0x20 [ 299.902664] ? lock_downgrade+0x900/0x900 [ 299.910791] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 299.916336] ? proc_fail_nth_write+0x9e/0x210 [ 299.920867] ? find_held_lock+0x36/0x1c0 [ 299.924974] ? ___might_sleep+0x1ed/0x300 [ 299.929136] ? arch_local_save_flags+0x40/0x40 [ 299.933724] ? __lock_is_held+0xb5/0x140 [ 299.933755] __should_failslab+0x124/0x180 [ 299.933776] should_failslab+0x9/0x14 [ 299.945858] __kmalloc_track_caller+0x2d0/0x750 [ 299.950548] ? strncpy_from_user+0x510/0x510 [ 299.954970] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 299.960525] ? strndup_user+0x77/0xd0 [ 299.964346] memdup_user+0x2c/0xa0 [ 299.967915] strndup_user+0x77/0xd0 [ 299.971569] ksys_mount+0x3c/0x140 [ 299.975133] __x64_sys_mount+0xbe/0x150 [ 299.979132] do_syscall_64+0x1b9/0x820 [ 299.983031] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 299.988409] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.993339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.998196] ? trace_hardirqs_on_caller+0x310/0x310 [ 300.003215] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 300.008235] ? prepare_exit_to_usermode+0x291/0x3b0 [ 300.013264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.018117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.023306] RIP: 0033:0x457569 [ 300.026499] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.045399] RSP: 002b:00007f397eb7cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.053115] RAX: ffffffffffffffda RBX: 00007f397eb7cc90 RCX: 0000000000457569 12:40:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 300.060395] RDX: 0000000020000380 RSI: 0000000020000080 RDI: 0000000020000040 [ 300.067665] RBP: 000000000072bf00 R08: 0000000020000300 R09: 0000000000000000 [ 300.074939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f397eb7d6d4 [ 300.082206] R13: 00000000004c289b R14: 00000000004d3c78 R15: 0000000000000003 [ 300.127210] autofs4:pid:9386:autofs_fill_super: called with bogus options 12:40:14 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x7ffffffff000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 300.184344] autofs4:pid:9391:autofs_fill_super: called with bogus options 12:40:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='\nutofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:14 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x10000, 0x4) 12:40:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:14 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x406800, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 300.500684] autofs4:pid:9420:autofs_fill_super: called with bogus options 12:40:14 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 12:40:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='%utofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:14 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 300.687683] autofs4:pid:9444:autofs_fill_super: called with bogus options [ 300.696523] overlayfs: missing 'lowerdir' 12:40:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='a%tofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000000)=""/113) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x80000, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000280)={0xffff, 0x0, {0x2, 0x3, 0x8, 0x0, 0x3}}) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000600)='./file0//ile0\x00') 12:40:14 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x403f00, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:14 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 300.882383] autofs4:pid:9465:autofs_fill_super: called with bogus options 12:40:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aptofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='adtofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 301.037691] overlayfs: missing 'lowerdir' 12:40:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) socket$can_bcm(0x1d, 0x2, 0x2) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sync() [ 301.095258] autofs4:pid:9496:autofs_fill_super: called with bogus options 12:40:15 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x400004, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aitofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 301.249280] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 12:40:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='astofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 301.352650] overlayfs: missing 'lowerdir' [ 301.394273] autofs4:pid:9535:autofs_fill_super: called with bogus options 12:40:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:15 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 301.461460] overlayfs: missing 'lowerdir' [ 301.475007] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 12:40:15 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404005, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='axtofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000580), 0x800) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x400001) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 12:40:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 301.681954] autofs4:pid:9567:autofs_fill_super: called with bogus options [ 301.702635] overlayfs: missing 'lowerdir' 12:40:15 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:15 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404002, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:15 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 1: r0 = gettid() r1 = dup(0xffffffffffffffff) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, 0x0) 12:40:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='altofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 301.987670] overlayfs: missing 'lowerdir' 12:40:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='a\ntofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 302.046379] overlayfs: missing 'lowerdir' 12:40:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aXtofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x75, 0x0, {0x1d, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63"}}, 0x28) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, r2, 0xffffffffffffffff, r0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000800)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0084a9007b51def180"], &(0x7f0000000640)=0x8) r5 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x40000) mq_getsetattr(r5, &(0x7f0000000840)={0x1, 0x4, 0x3, 0x80000000, 0x0, 0x800, 0xff, 0x7}, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x88, r6, 0x512, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x19}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x88}}, 0x40000) r7 = accept4(r3, 0x0, &(0x7f0000000740)=0xffffff0f, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000002c0)="87da5f1a", 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0xb) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r7, r8, &(0x7f0000000040), 0x10000000000443) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000580)={0x13, 0x2, 0x7}) read(r7, &(0x7f00000003c0)=""/72, 0x100000104) lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x2) sendmsg$xdp(r7, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xfffffffffffffffa}, 0x1c) 12:40:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:16 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x40400a, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 302.163023] autofs4:pid:9623:autofs_fill_super: called with bogus options 12:40:16 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 302.292400] overlayfs: missing 'lowerdir' 12:40:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aotofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:16 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x400300, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 302.448449] autofs4:pid:9656:autofs_fill_super: called with bogus options 12:40:16 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x1d}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x20000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x100000000, 0x6, 0x8, 0x3}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0x23, "aea050490abaf47ac90f19772b3289894c9b53c39e9503dea416b12c45dcfe7430e3f0"}, &(0x7f0000000200)=0x2b) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004a5000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1, 0x17}]}, &(0x7f0000000000)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x20000000000002a0, &(0x7f0000519fa8)=@framed={{}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xffffff50}]}, &(0x7f0000c43000)='syzkaller\x00', 0x9dd8, 0x1000, &(0x7f0000d35000)=""/4096}, 0x48) [ 302.616992] autofs4:pid:9679:autofs_fill_super: called with bogus options [ 302.631059] overlayfs: missing 'lowerdir' 12:40:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='actofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:16 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404060, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='au%ofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x28, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}, [{0x4}]}, 0x28}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 302.893990] autofs4:pid:9707:autofs_fill_super: called with bogus options 12:40:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='au\nofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) 12:40:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 302.995518] overlayfs: missing 'lowerdir' 12:40:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aut\nfs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:17 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404008, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:17 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 303.165758] autofs4:pid:9746:autofs_fill_super: called with bogus options 12:40:17 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 303.272439] overlayfs: missing 'lowerdir' 12:40:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aut%fs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="12888973ec1c8c7bde63f4f5878c055bc584c8908e1bd6b6b108b4090afd2e8e", 0x20}], 0x0, &(0x7f0000000640)) unshare(0x10500) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) [ 303.304779] autofs4:pid:9766:autofs_fill_super: called with bogus options 12:40:17 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 303.392061] overlayfs: missing 'lowerdir' 12:40:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto.s\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:17 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 303.471957] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 303.497065] autofs4:pid:9793:autofs_fill_super: called with bogus options 12:40:17 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404003, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:17 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto/s\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 303.656309] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 303.684857] overlayfs: missing 'lowerdir' 12:40:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:17 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:17 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404004, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:17 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 303.804716] cgroup: fork rejected by pids controller in /syz4 [ 303.838066] autofs4:pid:9831:autofs_fill_super: called with bogus options 12:40:17 executing program 1: unshare(0x8000400) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'bcsf0\x00', {0x2, 0x4e24, @broadcast}}) 12:40:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto\ns\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 303.973128] overlayfs: missing 'lowerdir' 12:40:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 304.048267] autofs4:pid:9854:autofs_fill_super: called with bogus options 12:40:18 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:18 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404007, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:18 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto%s\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:18 executing program 0 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x6, @empty, 0x7}, {0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, [], 0xe}, 0x4}, 0x100000001, [0xf0e, 0x7, 0x5, 0x2, 0xb9a9, 0x3ff, 0x1, 0x5]}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[]}}, 0x0) r2 = openat$cgroup_type(r0, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) readv(r2, &(0x7f0000000540), 0x10000000000002f4) 12:40:18 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof\n\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 304.339652] overlayfs: missing 'lowerdir' [ 304.375506] FAULT_INJECTION: forcing a failure. [ 304.375506] name failslab, interval 1, probability 0, space 0, times 0 [ 304.455482] CPU: 1 PID: 9893 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #61 [ 304.462736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.472110] Call Trace: [ 304.474731] dump_stack+0x1c4/0x2b4 [ 304.478424] ? dump_stack_print_info.cold.2+0x52/0x52 [ 304.483678] should_fail.cold.4+0xa/0x17 [ 304.487772] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 304.492911] ? graph_lock+0x170/0x170 [ 304.496750] ? __f_unlock_pos+0x19/0x20 [ 304.500753] ? lock_downgrade+0x900/0x900 [ 304.504937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 304.510494] ? proc_fail_nth_write+0x9e/0x210 [ 304.515019] ? find_held_lock+0x36/0x1c0 [ 304.519127] ? ___might_sleep+0x1ed/0x300 [ 304.523299] ? arch_local_save_flags+0x40/0x40 [ 304.527899] ? __lock_is_held+0xb5/0x140 [ 304.532005] __should_failslab+0x124/0x180 [ 304.536263] should_failslab+0x9/0x14 [ 304.540090] __kmalloc_track_caller+0x2d0/0x750 [ 304.544792] ? strncpy_from_user+0x510/0x510 [ 304.549217] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 304.554784] ? strndup_user+0x77/0xd0 [ 304.558619] memdup_user+0x2c/0xa0 [ 304.562184] strndup_user+0x77/0xd0 [ 304.565836] ksys_mount+0x3c/0x140 [ 304.569461] __x64_sys_mount+0xbe/0x150 [ 304.573466] do_syscall_64+0x1b9/0x820 [ 304.577394] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 304.582779] ? syscall_return_slowpath+0x5e0/0x5e0 [ 304.587724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.592595] ? trace_hardirqs_on_caller+0x310/0x310 [ 304.597633] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 304.602673] ? prepare_exit_to_usermode+0x291/0x3b0 [ 304.607715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.612583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.617786] RIP: 0033:0x457569 [ 304.620997] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.639925] RSP: 002b:00007f83bbef3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.647657] RAX: ffffffffffffffda RBX: 00007f83bbef3c90 RCX: 0000000000457569 12:40:18 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof#\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:18 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404006, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 304.654943] RDX: 0000000020000380 RSI: 0000000020000080 RDI: 0000000020000040 [ 304.662231] RBP: 000000000072bf00 R08: 0000000020000300 R09: 0000000000000000 [ 304.669518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bbef46d4 [ 304.676801] R13: 00000000004c289b R14: 00000000004d3c78 R15: 0000000000000003 12:40:18 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xe8, 0x3ff}, 0x0) lseek(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x0, 0xffd8) clone(0x21ff, &(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000180), &(0x7f0000000440)) semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000340)=""/113) accept(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000080)) [ 304.800038] overlayfs: missing 'lowerdir' 12:40:18 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:18 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='\nverlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x20000000000a, &(0x7f00000001c0)=0xcba8, 0x4) r3 = dup(r0) fcntl$dupfd(r1, 0x406, r2) execveat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000780)='%]self\x00', &(0x7f00000007c0)='eth0:\x00', &(0x7f0000000800)="776c616e302576626f786e657430172d73656c6600"], &(0x7f0000000480), 0x100) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3d6c, 0x4) readv(r0, &(0x7f0000000100)=[{&(0x7f00000018c0)=""/177, 0x33}], 0x10000000000000f5) 12:40:19 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='%verlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:19 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='\nutofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 305.304047] autofs4:pid:9940:autofs_fill_super: called with bogus options 12:40:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofX\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:19 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:19 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)=',verlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='%utofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 306.032951] 9pnet: Insufficient options for proto=fd 12:40:20 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aptofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000000000), 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:40:20 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='\\verlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:20 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='astofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 306.286334] 9pnet: Insufficient options for proto=fd 12:40:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:20 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='a\ntofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 306.370688] IPVS: ftp: loaded support on port[0] = 21 12:40:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 308.370507] IPVS: stopping master sync thread 8011 ... [ 308.378181] device bridge_slave_1 left promiscuous mode [ 308.384474] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.435560] device bridge_slave_0 left promiscuous mode [ 308.441248] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.817966] team0 (unregistering): Port device team_slave_1 removed [ 310.828945] team0 (unregistering): Port device team_slave_0 removed [ 310.840339] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 310.874265] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 310.942933] bond0 (unregistering): Released all slaves [ 311.025963] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.032532] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.039663] device bridge_slave_0 entered promiscuous mode [ 311.069399] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.076177] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.083504] device bridge_slave_1 entered promiscuous mode [ 311.117076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 311.165746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 311.316721] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 311.367715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 311.606051] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 311.613655] team0: Port device team_slave_0 added [ 311.662206] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 311.669722] team0: Port device team_slave_1 added [ 311.719473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.773711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.827755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 311.835035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.853307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.895645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 311.903480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.921743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.417820] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.424437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.431226] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.437596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.445659] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 313.070341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.642601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.741661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 313.839588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 313.845808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.853811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.953221] 8021q: adding VLAN 0 to HW filter on device team0 12:40:28 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof.\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:28 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='actofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:28 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='o%erlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:28 executing program 5 (fault-call:12 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1c}, 0x8c8}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="6dd3d4508c286075d64679b8111a005fc7e304610920241aae33032258c8eaa73cd59541666a290283ce72b2cdb1f5bc9bd04dee98d36903221f2a0950d2eff2a058ff737141831effa54fc37bca52a538e4a617897fea8d398a8e8e319c8c", 0x5f}, {&(0x7f0000000140)="561ef19940c64bba54deb560e8aa2b70ead350260691af7551d40daeb344731116f0cc626f8fc48fa61fd540c0ccfc3406b3f0e2a3f83ec67be2ccc4445bafc6ae32c1adf6d08c6480ade5b08957c3dd12425704b79dab60ed9ccb55a0070d52ec3e3610", 0x64}, {&(0x7f0000000280)="fb4b0f31b886e8ecfa8c5adaba21ee7bd179b484101a6192e28e2d2cee99d15f2ab93d980b19617a713a3396b0295a6141e21c03779f30b68e40ab1d918e96291ce6d8d3274d3a1ad0fc6734da1fc7b02aae10fb3c1916fffd0ead47052fe5c045969ab0a9d80fbfc4c2a3611a6af46b8b757283dd25c8a8a6415ac09b5b3de24fe954ddca61ddf236663e94921c5f6224e45f09f1fd4674304b956c7e0630a856309c12de4a98713f8bade8520248d8afe4f2486482d3795860fda69cc9", 0xbe}, {&(0x7f00000001c0)="4ec7375d9c1e98a98f8cc0db3f20d3c4e8aa5ca57493b5b63bc40f5d3edb3c244138bada6b9132f16bea3aa73f3ed4525551b6746e8316be7b08810a2e", 0x3d}, {&(0x7f0000000200)="266e5965d2d9d25aacb9faf15563d45617c919691e63d294c81c80848d37bc9e05c1dd9308887010804870fb93b198b5acf2a9304889616d0760081527", 0x3d}, {&(0x7f0000000340)="94ffe435b56eb6a99bf8d8c95c134c0dc4006302a7299ddc7806226ee0bb87dae6b03888ea55b8f0617a", 0x2a}], 0x6, 0x0, 0x0, 0x48805}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"766c61663a000000000000000000e500", 0x1000000802}) 12:40:28 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='a%tofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 314.645923] FAULT_INJECTION: forcing a failure. [ 314.645923] name failslab, interval 1, probability 0, space 0, times 0 12:40:28 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0xfffffffffffffffb}}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc", 0x20}, 0x60) [ 314.739573] CPU: 1 PID: 10329 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #61 [ 314.746925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.756293] Call Trace: [ 314.758908] dump_stack+0x1c4/0x2b4 [ 314.762568] ? dump_stack_print_info.cold.2+0x52/0x52 [ 314.767791] should_fail.cold.4+0xa/0x17 [ 314.771877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.777002] ? _parse_integer+0x180/0x180 [ 314.781175] ? graph_lock+0x170/0x170 [ 314.784993] ? graph_lock+0x170/0x170 [ 314.788817] ? find_held_lock+0x36/0x1c0 [ 314.792894] ? graph_lock+0x170/0x170 [ 314.796718] ? find_held_lock+0x36/0x1c0 [ 314.800816] ? ___might_sleep+0x1ed/0x300 [ 314.804983] ? arch_local_save_flags+0x40/0x40 [ 314.809578] ? lock_downgrade+0x900/0x900 [ 314.813750] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.819310] __should_failslab+0x124/0x180 [ 314.823566] should_failslab+0x9/0x14 [ 314.827410] kmem_cache_alloc+0x2be/0x730 [ 314.831575] ? find_held_lock+0x36/0x1c0 [ 314.835654] ? kasan_check_write+0x14/0x20 [ 314.840003] getname_flags+0xd0/0x5a0 [ 314.843828] user_path_at_empty+0x2d/0x50 [ 314.847994] vfs_statx+0x129/0x210 [ 314.851553] ? vfs_statx_fd+0xc0/0xc0 [ 314.855405] __do_sys_newlstat+0x8f/0x110 [ 314.859575] ? __do_sys_newstat+0x110/0x110 [ 314.863912] ? fput+0x130/0x1a0 [ 314.867218] ? do_syscall_64+0x9a/0x820 [ 314.871210] ? do_syscall_64+0x9a/0x820 [ 314.875210] ? lockdep_hardirqs_on+0x421/0x5c0 [ 314.879811] ? trace_hardirqs_on+0xbd/0x310 [ 314.884153] ? __ia32_sys_read+0xb0/0xb0 [ 314.888245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.893632] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 314.899119] __x64_sys_newlstat+0x54/0x80 [ 314.903291] do_syscall_64+0x1b9/0x820 [ 314.907195] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 314.912575] ? syscall_return_slowpath+0x5e0/0x5e0 [ 314.917523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.922405] ? trace_hardirqs_on_caller+0x310/0x310 [ 314.927442] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 314.932483] ? prepare_exit_to_usermode+0x291/0x3b0 [ 314.937527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.942422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.947630] RIP: 0033:0x457569 [ 314.950844] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.969763] RSP: 002b:00007fe2f88efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 314.977500] RAX: ffffffffffffffda RBX: 00007fe2f88efc90 RCX: 0000000000457569 12:40:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='o\nerlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 314.984783] RDX: 0000000000000000 RSI: 00000000200019c0 RDI: 0000000020001980 [ 314.992063] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 314.999345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2f88f06d4 [ 315.006655] R13: 00000000004c279a R14: 00000000004d3a38 R15: 0000000000000005 12:40:29 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='axtofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofp\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:29 executing program 5 (fault-call:12 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:29 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0xfffffffffffffffb}}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc", 0x20}, 0x60) [ 315.219673] cgroup: fork rejected by pids controller in /syz0 12:40:29 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='altofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 315.362161] FAULT_INJECTION: forcing a failure. [ 315.362161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.374049] CPU: 0 PID: 10385 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #61 [ 315.381355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.390778] Call Trace: [ 315.393446] dump_stack+0x1c4/0x2b4 [ 315.397115] ? dump_stack_print_info.cold.2+0x52/0x52 [ 315.402387] should_fail.cold.4+0xa/0x17 [ 315.406495] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.411631] ? mark_held_locks+0x130/0x130 [ 315.415885] ? perf_trace_lock_acquire+0x15b/0x800 [ 315.420851] ? mark_held_locks+0x130/0x130 [ 315.425116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.430682] ? check_preemption_disabled+0x48/0x200 [ 315.435719] ? graph_lock+0x170/0x170 [ 315.439549] ? debug_smp_processor_id+0x1c/0x20 [ 315.444238] ? perf_trace_lock_acquire+0x15b/0x800 [ 315.449194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.454760] ? check_preemption_disabled+0x48/0x200 [ 315.459805] ? debug_smp_processor_id+0x1c/0x20 [ 315.464499] ? perf_trace_lock_acquire+0x15b/0x800 [ 315.469457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.475018] ? should_fail+0x22d/0xd01 [ 315.478932] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.484062] ? _parse_integer+0x180/0x180 [ 315.488239] __alloc_pages_nodemask+0x34b/0xde0 [ 315.492936] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 315.497982] ? graph_lock+0x170/0x170 [ 315.501811] ? find_held_lock+0x36/0x1c0 [ 315.505919] ? ___might_sleep+0x1ed/0x300 [ 315.510099] ? trace_hardirqs_off+0xb8/0x310 [ 315.514537] cache_grow_begin+0x91/0x8c0 [ 315.518627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.524197] ? check_preemption_disabled+0x48/0x200 [ 315.529252] kmem_cache_alloc+0x665/0x730 [ 315.533443] ? find_held_lock+0x36/0x1c0 [ 315.537543] getname_flags+0xd0/0x5a0 [ 315.541400] user_path_at_empty+0x2d/0x50 [ 315.545651] vfs_statx+0x129/0x210 [ 315.549223] ? vfs_statx_fd+0xc0/0xc0 [ 315.553062] __do_sys_newlstat+0x8f/0x110 [ 315.557231] ? __do_sys_newstat+0x110/0x110 [ 315.561572] ? fput+0x130/0x1a0 [ 315.564880] ? do_syscall_64+0x9a/0x820 [ 315.568880] ? do_syscall_64+0x9a/0x820 [ 315.572886] ? lockdep_hardirqs_on+0x421/0x5c0 [ 315.577634] ? trace_hardirqs_on+0xbd/0x310 [ 315.581979] ? __ia32_sys_read+0xb0/0xb0 [ 315.586067] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.591474] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 315.596964] __x64_sys_newlstat+0x54/0x80 [ 315.601144] do_syscall_64+0x1b9/0x820 [ 315.605062] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 315.610457] ? syscall_return_slowpath+0x5e0/0x5e0 [ 315.615437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.620309] ? trace_hardirqs_on_caller+0x310/0x310 [ 315.625354] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 315.630449] ? prepare_exit_to_usermode+0x291/0x3b0 [ 315.635500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.640480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.645687] RIP: 0033:0x457569 12:40:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='ov\nrlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofu\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 315.648905] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.667832] RSP: 002b:00007fe2f88efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 315.675584] RAX: ffffffffffffffda RBX: 00007fe2f88efc90 RCX: 0000000000457569 [ 315.682887] RDX: 0000000000000000 RSI: 00000000200019c0 RDI: 0000000020001980 [ 315.690182] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 315.697479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2f88f06d4 [ 315.704775] R13: 00000000004c279a R14: 00000000004d3a38 R15: 0000000000000005 12:40:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:29 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0xfffffffffffffffb}}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc", 0x20}, 0x60) 12:40:29 executing program 5 (fault-call:12 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof*\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='ov%rlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofc\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:29 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aXtofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:30 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0xfffffffffffffffb}}, 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc", 0x20}, 0x60) [ 316.077510] FAULT_INJECTION: forcing a failure. [ 316.077510] name failslab, interval 1, probability 0, space 0, times 0 [ 316.131636] CPU: 1 PID: 10439 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #61 [ 316.138966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.148343] Call Trace: [ 316.151011] dump_stack+0x1c4/0x2b4 [ 316.154682] ? dump_stack_print_info.cold.2+0x52/0x52 [ 316.159937] should_fail.cold.4+0xa/0x17 [ 316.164038] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 316.169175] ? perf_trace_lock_acquire+0x15b/0x800 [ 316.174147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.179714] ? graph_lock+0x170/0x170 [ 316.183574] ? perf_trace_lock+0x7a0/0x7a0 [ 316.187845] ? debug_smp_processor_id+0x1c/0x20 [ 316.192539] ? perf_trace_lock_acquire+0x15b/0x800 [ 316.197508] ? find_held_lock+0x36/0x1c0 [ 316.201685] ? ___might_sleep+0x1ed/0x300 [ 316.205867] ? arch_local_save_flags+0x40/0x40 [ 316.210573] ? v9fs_fid_find+0x24b/0x2f0 [ 316.214693] __should_failslab+0x124/0x180 [ 316.218964] should_failslab+0x9/0x14 [ 316.222791] kmem_cache_alloc_trace+0x2d7/0x750 [ 316.227483] ? kasan_check_write+0x14/0x20 [ 316.231746] ? do_raw_spin_lock+0xc1/0x200 [ 316.236094] p9_client_stat+0xc1/0x720 [ 316.240021] ? v9fs_session_init.cold.3+0x73/0x73 [ 316.244888] ? p9_client_mknod_dotl+0x650/0x650 [ 316.249586] ? do_raw_spin_lock+0xc1/0x200 [ 316.253865] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 316.258937] v9fs_refresh_inode+0xba/0x2f0 [ 316.263265] ? map_id_up+0x193/0x3d0 [ 316.267009] ? v9fs_qid2ino+0x40/0x40 [ 316.270832] ? make_kprojid+0x30/0x30 [ 316.274673] v9fs_lookup_revalidate+0x1ce/0x220 [ 316.279461] lookup_fast+0xc23/0x12a0 [ 316.283296] ? smack_file_ioctl+0x3c0/0x3c0 [ 316.287652] ? __follow_mount_rcu.isra.33.part.34+0x890/0x890 [ 316.293563] ? privileged_wrt_inode_uidgid+0x68/0xd0 [ 316.298709] walk_component+0x139/0x25c0 [ 316.302812] ? inode_permission+0xb2/0x560 [ 316.307080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.312647] ? path_init+0x1ed0/0x1ed0 [ 316.316579] ? walk_component+0x25c0/0x25c0 [ 316.320954] ? save_stack+0xa9/0xd0 [ 316.324612] ? kasan_slab_alloc+0x12/0x20 [ 316.328783] ? kmem_cache_alloc+0x12e/0x730 [ 316.333129] ? getname_flags+0xd0/0x5a0 [ 316.337124] ? user_path_at_empty+0x2d/0x50 [ 316.341479] path_lookupat.isra.43+0x212/0xc00 [ 316.346092] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 316.351312] ? path_parentat.isra.41+0x160/0x160 [ 316.356098] ? usercopy_warn+0x110/0x110 [ 316.360197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.365766] ? check_preemption_disabled+0x48/0x200 [ 316.370822] filename_lookup+0x26a/0x520 [ 316.374919] ? filename_parentat.isra.56+0x570/0x570 [ 316.380044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.385622] ? digsig_verify+0x1530/0x1530 [ 316.389878] ? kmem_cache_alloc+0x33a/0x730 [ 316.394243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.399800] ? getname_flags+0x26e/0x5a0 [ 316.403893] user_path_at_empty+0x40/0x50 [ 316.408079] vfs_statx+0x129/0x210 [ 316.411649] ? vfs_statx_fd+0xc0/0xc0 [ 316.415491] __do_sys_newlstat+0x8f/0x110 [ 316.419661] ? __do_sys_newstat+0x110/0x110 [ 316.424004] ? fput+0x130/0x1a0 [ 316.427310] ? do_syscall_64+0x9a/0x820 [ 316.431445] ? do_syscall_64+0x9a/0x820 [ 316.435447] ? lockdep_hardirqs_on+0x421/0x5c0 [ 316.440118] ? trace_hardirqs_on+0xbd/0x310 [ 316.444464] ? __ia32_sys_read+0xb0/0xb0 [ 316.448555] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.453953] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 316.459448] __x64_sys_newlstat+0x54/0x80 [ 316.463633] do_syscall_64+0x1b9/0x820 [ 316.467548] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 316.472949] ? syscall_return_slowpath+0x5e0/0x5e0 [ 316.477900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.482774] ? trace_hardirqs_on_caller+0x310/0x310 [ 316.487880] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 316.492993] ? prepare_exit_to_usermode+0x291/0x3b0 [ 316.498046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.502934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.508149] RIP: 0033:0x457569 [ 316.511392] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 316.530326] RSP: 002b:00007fe2f88efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 316.538148] RAX: ffffffffffffffda RBX: 00007fe2f88efc90 RCX: 0000000000457569 [ 316.545448] RDX: 0000000000000000 RSI: 00000000200019c0 RDI: 0000000020001980 [ 316.552745] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 316.560038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2f88f06d4 [ 316.567327] R13: 00000000004c279a R14: 00000000004d3a38 R15: 0000000000000005 12:40:30 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof%\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:30 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='ove\nlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='adtofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:30 executing program 5 (fault-call:12 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aitofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000000), &(0x7f0000000080)=0x2) r1 = syz_open_dev$audion(0x0, 0x94b, 0x80002) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/199, &(0x7f00000001c0)=0xfe) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffffffc1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0xb0, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x400, @ipv4={[], [], @multicast2}, 0x1}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x8}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e22, 0x8, @empty, 0x6}, @in6={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, [], 0x12}, 0x6}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0)=r2, 0x4) 12:40:30 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofd\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:30 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='ove%lay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aotofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 317.047717] IPVS: length: 254 != 8 [ 317.064775] IPVS: length: 254 != 8 12:40:31 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofx\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:31 executing program 1: socketpair$unix(0x1, 0x405, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x81fb) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x277) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f00000000c0)=""/91) fcntl$dupfd(r3, 0x0, r3) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x2, 0x1}) 12:40:31 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofl\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:31 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='au\nofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:31 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overuay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 317.394916] FAULT_INJECTION: forcing a failure. [ 317.394916] name failslab, interval 1, probability 0, space 0, times 0 [ 317.406521] CPU: 0 PID: 10558 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #61 [ 317.413830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.423294] Call Trace: [ 317.425918] dump_stack+0x1c4/0x2b4 [ 317.429586] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.429620] ? check_noncircular+0x20/0x20 [ 317.439068] should_fail.cold.4+0xa/0x17 [ 317.439096] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 317.448279] ? print_usage_bug+0xc0/0xc0 [ 317.452400] ? lock_downgrade+0x900/0x900 [ 317.456592] ? __lock_acquire+0x7ec/0x4ec0 [ 317.460861] ? print_usage_bug+0xc0/0xc0 [ 317.464951] ? debug_smp_processor_id+0x1c/0x20 [ 317.469641] ? perf_trace_lock_acquire+0x15b/0x800 [ 317.474596] ? __lock_acquire+0x7ec/0x4ec0 [ 317.478860] ? mark_held_locks+0x130/0x130 [ 317.483143] ? mark_held_locks+0x130/0x130 [ 317.487449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.493135] ? check_preemption_disabled+0x48/0x200 [ 317.498186] __should_failslab+0x124/0x180 [ 317.498209] should_failslab+0x9/0x14 [ 317.498230] kmem_cache_alloc+0x47/0x730 [ 317.506289] ? print_usage_bug+0xc0/0xc0 [ 317.514459] ? debug_smp_processor_id+0x1c/0x20 [ 317.519165] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 317.524913] radix_tree_extend+0x294/0x660 [ 317.529190] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 317.535109] ? check_noncircular+0x20/0x20 [ 317.539428] idr_get_free+0x83d/0xec0 [ 317.543268] ? prep_compound_page+0x26c/0x390 [ 317.547791] ? ida_pre_get+0x130/0x130 [ 317.551704] ? debug_smp_processor_id+0x1c/0x20 [ 317.556425] ? perf_trace_lock_acquire+0x15b/0x800 [ 317.561411] ? debug_smp_processor_id+0x1c/0x20 [ 317.566106] ? perf_trace_lock_acquire+0x15b/0x800 [ 317.571051] ? perf_trace_lock+0x7a0/0x7a0 [ 317.575298] ? perf_trace_lock+0x7a0/0x7a0 [ 317.579699] ? print_usage_bug+0xc0/0xc0 [ 317.583777] ? graph_lock+0x170/0x170 [ 317.587578] ? __lock_acquire+0x7ec/0x4ec0 [ 317.591815] ? __lock_acquire+0x7ec/0x4ec0 [ 317.596057] idr_alloc_u32+0x201/0x3f0 [ 317.599951] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 317.604800] ? p9_idpool_get+0x23/0x90 [ 317.608704] idr_alloc+0x111/0x1b0 [ 317.612260] ? idr_alloc_u32+0x3f0/0x3f0 [ 317.616329] ? do_raw_spin_lock+0xc1/0x200 [ 317.620589] p9_idpool_get+0x3d/0x90 [ 317.624334] p9_client_prepare_req.part.8+0xec/0xc30 [ 317.629556] ? __kernel_text_address+0xd/0x40 [ 317.634081] ? p9_free_req.isra.7+0x140/0x140 [ 317.638695] ? save_stack+0xa9/0xd0 [ 317.642338] p9_client_rpc+0x1c2/0x1480 [ 317.646381] ? v9fs_lookup_revalidate+0x1ce/0x220 [ 317.651401] ? vfs_statx+0x129/0x210 [ 317.655136] ? do_syscall_64+0x1b9/0x820 [ 317.659215] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 317.664584] ? find_held_lock+0x36/0x1c0 [ 317.668656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.674199] ? check_preemption_disabled+0x48/0x200 [ 317.679223] ? check_preemption_disabled+0x48/0x200 [ 317.684254] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 317.689807] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 317.695104] ? rcu_pm_notify+0xc0/0xc0 [ 317.699029] ? p9_client_stat+0xc1/0x720 [ 317.703125] ? kmem_cache_alloc_trace+0x353/0x750 [ 317.707988] ? do_raw_spin_lock+0xc1/0x200 [ 317.712229] p9_client_stat+0x12e/0x720 [ 317.716222] ? v9fs_session_init.cold.3+0x73/0x73 [ 317.721072] ? p9_client_mknod_dotl+0x650/0x650 [ 317.725746] ? do_raw_spin_lock+0xc1/0x200 [ 317.730006] ? v9fs_fid_lookup_with_uid+0x11d/0xb90 [ 317.735045] v9fs_refresh_inode+0xba/0x2f0 [ 317.739290] ? map_id_up+0x193/0x3d0 [ 317.743017] ? v9fs_qid2ino+0x40/0x40 [ 317.746814] ? make_kprojid+0x30/0x30 [ 317.750627] v9fs_lookup_revalidate+0x1ce/0x220 [ 317.755297] lookup_fast+0xc23/0x12a0 [ 317.759110] ? smack_file_ioctl+0x3c0/0x3c0 [ 317.763452] ? __follow_mount_rcu.isra.33.part.34+0x890/0x890 [ 317.769385] ? privileged_wrt_inode_uidgid+0x68/0xd0 [ 317.774515] walk_component+0x139/0x25c0 [ 317.778587] ? inode_permission+0xb2/0x560 [ 317.782837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.788400] ? path_init+0x1ed0/0x1ed0 [ 317.792319] ? walk_component+0x25c0/0x25c0 [ 317.796694] ? save_stack+0xa9/0xd0 [ 317.800321] ? kasan_slab_alloc+0x12/0x20 [ 317.804556] ? kmem_cache_alloc+0x12e/0x730 [ 317.808878] ? getname_flags+0xd0/0x5a0 [ 317.812852] ? user_path_at_empty+0x2d/0x50 [ 317.817269] path_lookupat.isra.43+0x212/0xc00 [ 317.821853] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 317.827044] ? path_parentat.isra.41+0x160/0x160 [ 317.831879] ? usercopy_warn+0x110/0x110 [ 317.835959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.841563] ? check_preemption_disabled+0x48/0x200 [ 317.846589] filename_lookup+0x26a/0x520 [ 317.850654] ? filename_parentat.isra.56+0x570/0x570 [ 317.855759] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.861435] ? digsig_verify+0x1530/0x1530 [ 317.865672] ? kmem_cache_alloc+0x33a/0x730 [ 317.870002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.875550] ? getname_flags+0x26e/0x5a0 [ 317.879616] user_path_at_empty+0x40/0x50 [ 317.883779] vfs_statx+0x129/0x210 [ 317.887321] ? vfs_statx_fd+0xc0/0xc0 [ 317.891139] __do_sys_newlstat+0x8f/0x110 [ 317.895291] ? __do_sys_newstat+0x110/0x110 [ 317.899610] ? fput+0x130/0x1a0 [ 317.902893] ? do_syscall_64+0x9a/0x820 [ 317.906922] ? do_syscall_64+0x9a/0x820 [ 317.910911] ? lockdep_hardirqs_on+0x421/0x5c0 [ 317.915507] ? trace_hardirqs_on+0xbd/0x310 [ 317.919837] ? __ia32_sys_read+0xb0/0xb0 [ 317.923913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.929286] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 317.934799] __x64_sys_newlstat+0x54/0x80 [ 317.938963] do_syscall_64+0x1b9/0x820 [ 317.942856] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 317.948223] ? syscall_return_slowpath+0x5e0/0x5e0 [ 317.953154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.958004] ? trace_hardirqs_on_caller+0x310/0x310 [ 317.963021] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 317.968102] ? prepare_exit_to_usermode+0x291/0x3b0 [ 317.973121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.978303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.983547] RIP: 0033:0x457569 [ 317.986742] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.005704] RSP: 002b:00007fe2f88efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 318.013426] RAX: ffffffffffffffda RBX: 00007fe2f88efc90 RCX: 0000000000457569 [ 318.020697] RDX: 0000000000000000 RSI: 00000000200019c0 RDI: 0000000020001980 [ 318.027974] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 318.035256] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2f88f06d4 [ 318.042537] R13: 00000000004c279a R14: 00000000004d3a38 R15: 0000000000000005 12:40:32 executing program 5 (fault-call:12 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:32 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='au%ofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 1: socket$nl_xfrm(0xa, 0x3, 0x87) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10402, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00148700fe800000010000b82d680a00000000aafe8000000000000000000000000000aa00000500", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x4a5]}) 12:40:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofi\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof+\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='over\nay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="960f33"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x0, 0x8, 0x8, 0x3}}, 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:32 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aut\nfs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof0\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 318.368748] 9pnet: Insufficient options for proto=fd [ 318.397025] 9pnet: Insufficient options for proto=fd 12:40:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofo\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:40:32 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='over%ay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x0, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof-\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x8, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) sync_file_range(r0, 0x9, 0x81, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="6664696e666f2f3300138ee9e4b65dcb63ea88e675a2acff65b2381d162691a6a0c346382b82ef73ea22fbe7f461519916db81ef865710a5b4ffb84efce27284") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000480), 0x10000000000001e1, 0x0) 12:40:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:32 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='over.ay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:33 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='aut%fs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in6, @in6=@dev}, {@in6=@remote}, @in6=@ipv4={[], [], @broadcast}}}, [@mark={0xc}]}, 0x104}, 0x8}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4080, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140100001800200029bd7000fbdbdf250000000000000000000000000000000000000000000000000000ffffe00000024e240cab4e2301000200208029000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ffffffff000000000000000000000000000004d27e000000fe8000000000000000000000de0000000000000007000001000000000004000000000000040000000000000002000000000000007f00000000000000000000000000000003780000000000000800000000000000070000000000000003000000000000000500000008000000000000002cbd7000001217a6cb0006050400000000000000030000000000000008000c00000000000c001c00000000000000000000000000", @ANYRES32=r4, @ANYBLOB="020000000800180000000001"], 0x114}, 0x1, 0x0, 0x0, 0x20004811}, 0x10) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000100)=0x9ac) 12:40:33 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overLay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:33 executing program 1: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000100)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x200400) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x6, 0x968, 0x3, 0x1, 0x40}) 12:40:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:33 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overl,y\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:33 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:34 executing program 1: r0 = socket(0x3, 0x80000, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x300000000000000, 0x80, &(0x7f00000000c0)=@nat={'nat\x00?\x00', 0x19, 0x2, 0x288, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x300) sendfile(r0, r0, &(0x7f0000000000), 0x1200000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f00000001c0)="610474722f04fffffb12473c7f36") 12:40:34 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overl\\y\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 320.269067] IPVS: ftp: loaded support on port[0] = 21 [ 320.445944] IPVS: ftp: loaded support on port[0] = 21 [ 322.250342] IPVS: stopping master sync thread 8043 ... [ 322.260678] device bridge_slave_1 left promiscuous mode [ 322.266220] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.320814] device bridge_slave_0 left promiscuous mode [ 322.326294] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.675693] team0 (unregistering): Port device team_slave_1 removed [ 324.685988] team0 (unregistering): Port device team_slave_0 removed [ 324.696744] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 324.734946] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 324.791087] bond0 (unregistering): Released all slaves [ 325.302898] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.320107] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.327627] device bridge_slave_0 entered promiscuous mode [ 325.379706] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.398403] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.407703] device bridge_slave_0 entered promiscuous mode [ 325.428961] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.439978] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.447470] device bridge_slave_1 entered promiscuous mode [ 325.458482] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.475068] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.491425] device bridge_slave_1 entered promiscuous mode [ 325.550705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 325.587139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 325.624845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 325.707260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 325.804976] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 325.881332] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 325.978832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 325.987698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.031042] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 326.041789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 326.048665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.108892] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 326.226043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 326.243729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.296255] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 326.304225] team0: Port device team_slave_0 added [ 326.329624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 326.351519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.400482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 326.410756] team0: Port device team_slave_1 added [ 326.500320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.553717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.608341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 326.615721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.624632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.645660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 326.660752] team0: Port device team_slave_0 added [ 326.678090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 326.686259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.704385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.747929] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 326.755748] team0: Port device team_slave_1 added [ 326.830596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.925133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.983775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 327.000309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.018445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.099141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 327.106634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.115382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.360818] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.367209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.373975] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.380408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.388729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 327.657769] device bridge_slave_1 left promiscuous mode [ 327.664823] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.700666] device bridge_slave_0 left promiscuous mode [ 327.706110] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.762688] team0 (unregistering): Port device team_slave_1 removed [ 327.774450] team0 (unregistering): Port device team_slave_0 removed [ 327.785156] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 327.855035] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 327.922604] bond0 (unregistering): Released all slaves [ 328.007125] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.013602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.020317] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.026667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.034163] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.041993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.049321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.339940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.512452] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 330.681657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.688678] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 330.696019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.706072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.864690] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 330.878166] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.035497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 331.041764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.050755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.205678] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.929393] autofs4:pid:11255:autofs_fill_super: called with bogus options 12:40:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto\ns\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:46 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x385001, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000800)) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) sched_setscheduler(r4, 0x2000000000002, &(0x7f00000001c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000280)={0xeb09, 0x7ff, 0x3ff}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = accept4(r2, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r8}, 0x14) sendto$packet(r5, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r9 = dup2(r2, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000240)={0x4}) 12:40:46 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overl\ny\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:46 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 332.200458] autofs4:pid:11293:autofs_fill_super: called with bogus options 12:40:46 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\b', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:46 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto%s\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:46 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overl%y\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto.s\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:46 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsh', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:47 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:47 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='auto/s\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:48 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x385001, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000800)) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) sched_setscheduler(r4, 0x2000000000002, &(0x7f00000001c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000280)={0xeb09, 0x7ff, 0x3ff}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = accept4(r2, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r8}, 0x14) sendto$packet(r5, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r9 = dup2(r2, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000240)={0x4}) 12:40:48 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:48 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\t', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:48 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overla\n\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:48 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof.\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:48 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofu\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:48 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:48 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof+\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:48 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overla%\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 334.532199] autofs4:pid:11430:autofs_fill_super: called with bogus options 12:40:48 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) [ 334.660924] autofs4:pid:11438:autofs_fill_super: called with bogus options 12:40:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x385001, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000800)) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) sched_setscheduler(r4, 0x2000000000002, &(0x7f00000001c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000280)={0xeb09, 0x7ff, 0x3ff}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = accept4(r2, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r8}, 0x14) sendto$packet(r5, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r9 = dup2(r2, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000240)={0x4}) 12:40:49 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofc\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:49 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:49 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:49 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c617904", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:49 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 335.361268] autofs4:pid:11480:autofs_fill_super: called with bogus options [ 335.383639] autofs4:pid:11490:autofs_fill_super: called with bogus options 12:40:49 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofx\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:49 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:49 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof0\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 335.667281] autofs4:pid:11503:autofs_fill_super: called with bogus options [ 335.668002] autofs4:pid:11508:autofs_fill_super: called with bogus options 12:40:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x385001, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000800)) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) sched_setscheduler(r4, 0x2000000000002, &(0x7f00000001c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000280)={0xeb09, 0x7ff, 0x3ff}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = accept4(r2, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r8}, 0x14) sendto$packet(r5, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r9 = dup2(r2, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000240)={0x4}) 12:40:49 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f66737f", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:49 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay`', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:49 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 335.929617] autofs4:pid:11547:autofs_fill_super: called with bogus options 12:40:49 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:50 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofi\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:50 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:50 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667305", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673eb", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 336.762778] overlayfs: missing 'lowerdir' [ 336.814489] overlayfs: missing 'lowerdir' 12:40:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x385001, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000800)) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) sched_setscheduler(r4, 0x2000000000002, &(0x7f00000001c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r5 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x4) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0xfffffe36) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x2100000005, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x7, 0xadc, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000280)={0xeb09, 0x7ff, 0x3ff}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = accept4(r2, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xfffffffffffffea1) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x1a}, r8}, 0x14) sendto$packet(r5, &(0x7f0000000600)="d1442e589c17d8fe827b5bada9e08c53a3c0de4f6bc6ab91ac9ab0307a653752899573d165bf5f97e43c1711bcb4898aabbd62499f1e239f8adf3e8e7fb6fa3e6106eafb195798da1a84dc7456a7397ae523ebcacb6d0da0744d72e3af95f267465b1c8d69452d5f714e3263966e3fd8a4192ba19f75b9619d2e2e851e2ea48bd57cc4af960d52ba50d976733ea381b9a98ef615161a594f03a468837be97803f9c6f620f77eefa1145de49a69133c01b0fc9a57ad9bac2db73d6b7b4085918d81b3e2660a30087de11ccc3a34bd7eab65b02336e2bb6de8d0f923d83d0efd5186d6747f137f9372", 0xe8, 0x4004, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r9 = dup2(r2, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000240)={0x4}) 12:40:50 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:50 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:50 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofl\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 337.031545] overlayfs: missing 'lowerdir' 12:40:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 337.139386] autofs4:pid:11613:autofs_fill_super: called with bogus options 12:40:51 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\f', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:51 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179c0", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:51 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofd\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:51 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x381, 0x101000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x6a, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x2c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x100000001}, &(0x7f0000000140)=0x8) write$P9_RATTACH(r0, &(0x7f0000000180)={0x14, 0x69, 0x2, {0x0, 0x2, 0x6}}, 0x14) lseek(r0, 0x3f, 0x2) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000001c0)="fafbfc2e05691c01d48e3efd801e252d93cfba3ca11b31696faaa8a42374cd7250726c7939254de4b2326e2507b75708b01f1b0bff3b2c439652b935811272679ed2fc12979dc22604db7caf9f5213c3a15fbd621537fe5dd7896c504bdfd90c6cdf2e7c98a2529d173534f236836a6d5d78dfb3524d72e8bfa7e544b036d58d58673e61a344b9f1797fc4da89affbf1e436788f0bce50bba7500d0807fda07f0d9ec63c72fa4539ba8bf1190f3b15975a501a77b15e2e4f2d065332f594dd", 0xbf) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x6, 0x100, 0x1, "43002ec2e1dba540cf8529794355fba3eaf730b16be50a764fd35902e1685ff6a3452eecab650a2e712d7c39b2fdc5724b9f1c1bf5a117a780ee981c1b3aa9", 0xb}, 0x60) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000300)={0x0, r0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x400, 0x8}, 0x8) modify_ldt$write2(0x11, &(0x7f0000000380)={0x61f7, 0x1000, 0xffffffffffffffff, 0x5, 0x1, 0xfffffffffffffffc, 0x8, 0x3, 0x2, 0x7fff}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r4, 0xffffffff, 0x10}, 0xc) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, 0x2, 0x2, 0x50, &(0x7f0000ffa000/0x4000)=nil, 0x81}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000440)={0x6a39, 0x1fd4f9f8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000480)={0x1}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x1, 0x100, 0xfffffffffffffffe, 0x9, 0x2, 0xffff, 0x4368, 0x200, 0x4, 0x3}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x5565, 0x6, 0x6, 0x100000001}, {0x8, 0x2, 0x5, 0x62ab}]}, 0x10) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000580)={{0x0, 0x43}, 0x7a}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=0x1000) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000001600), &(0x7f0000001640)=0x4) read(r0, &(0x7f0000001680)=""/199, 0xc7) stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000001a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000001b80)=0xe8) mount$9p_fd(0x0, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='9p\x00', 0x102010, &(0x7f0000001bc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1ff}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@cache_mmap='cache=mmap'}, {@cache_loose='cache=loose'}, {@dfltuid={'dfltuid', 0x3d, r6}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/admmidi#\x00'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x8}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r7}}, {@fowner_lt={'fowner<', r8}}]}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000001d40)=0x16) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001d80)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0xe4f0, 0xffffffffffffff7f}, 0x90) ioctl$TCGETA(r0, 0x5405, &(0x7f0000001e40)) accept4$alg(r0, 0x0, 0x0, 0x800) 12:40:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:51 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667304", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:51 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofo\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:51 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x28, 0x0, 0x0, 0x4f45}, {0x80000006}]}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x10000) 12:40:51 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:51 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof%\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 337.802772] overlayfs: missing 'lowerdir' 12:40:51 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:51 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof\n\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 337.892789] overlayfs: missing 'lowerdir' 12:40:51 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:51 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) io_setup(0x4, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x113) io_submit(r1, 0xb6a04a8, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000400)}]) 12:40:52 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 338.019051] autofs4:pid:11719:autofs_fill_super: called with bogus options [ 338.020155] autofs4:pid:11722:autofs_fill_super: called with bogus options 12:40:52 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofX\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 338.142153] overlayfs: missing 'lowerdir' 12:40:52 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofp\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f00000001c0)) [ 338.247488] autofs4:pid:11754:autofs_fill_super: called with bogus options 12:40:52 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:52 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 338.311682] autofs4:pid:11763:autofs_fill_super: called with bogus options 12:40:52 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\n', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof*\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 338.462458] overlayfs: missing 'lowerdir' 12:40:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:52 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs`', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:52 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\a', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:52 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:52 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof-\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "1bc9e497188ab1ad14865a173151667c894be6bc"}, 0x15, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 12:40:52 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\n', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 338.865338] autofs4:pid:11835:autofs_fill_super: called with bogus options 12:40:52 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xffffffffffffffff, 0x0) getsockname$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) socket$inet6(0xa, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000100)={0x3, 0x3ff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @rand_addr}}}}, &(0x7f00000000c0)=0xb0) 12:40:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:52 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autof#\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:52 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:53 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c617905", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 339.129381] autofs4:pid:11865:autofs_fill_super: called with bogus options 12:40:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000a900000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda1d17eab77d8fcf208a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4bbc7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caacedc58efdb310dad92ef"], &(0x7f0000000100)=0xcd) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xc04, 0x0, 0xff}, 0xb) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000002c0)=ANY=[@ANYBLOB="45000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000002000000000"]) r3 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000340)="ca34e3582f7e25cf7f06753a7a65af78f4c6df40c9b97beb9d7e5c87be4697530e757758a5add43bc1a62a65843c627df5909e221dc6c323dbb4c6eb55a20e33010da2d6b72f87ad048504d4b7", 0x4d, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000140)=""/23, 0x17) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000280)="32d1465129bbc6d8fdc147b5532cd756337973a0eb2040861e124465203c4151ded4c2c1439342c52d3d5e2cc32b8e859e02901ddf26c686eb0cc355a8e6371af3bcff677c365388c1fef7f60d7e873fb62fd98c063f87e7a35db2bc2a7dcda5025e5d2437451784522e7b34bdb3a20e42c24093539a494a02acdd8cb53861ef6d9201bb99f82300d87cbee31c", 0x8d, 0xfffffffffffffffe) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0x3}, &(0x7f0000000240)='syz', 0xffffffffffffffff) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000480)=""/227, &(0x7f0000000580)=0xe3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x44000, 0x0) 12:40:53 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f66738c", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:53 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) [ 339.583782] overlayfs: missing 'lowerdir' 12:40:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:53 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 339.745583] autofs4:pid:11923:autofs_fill_super: called with bogus options 12:40:53 executing program 1: socket$netlink(0x10, 0x3, 0xa) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000009c0)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) fcntl$setown(r1, 0x8, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r2 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$RTC_PIE_ON(r1, 0x7005) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) getresuid(&(0x7f0000000280), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={r4}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={r6}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) [ 339.803112] overlayfs: missing 'lowerdir' 12:40:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 340.138520] autofs4:pid:11949:autofs_fill_super: called with bogus options 12:40:54 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:54 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:54 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:54 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000008912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="649c47ad46390dc86dae79fa409d4d54", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002c00), 0x177, &(0x7f0000002c40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="be940abc4a5471068ac44c06e9d1fdc30cfa3422adbb5dbdb83e4dea0db2133c9ccacbfd8801b52d7331a2041b", 0x2d}]) [ 340.341245] autofs4:pid:11966:autofs_fill_super: called with bogus options [ 340.364509] overlayfs: missing 'lowerdir' 12:40:54 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:54 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:54 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 340.638331] overlayfs: missing 'lowerdir' [ 340.674642] autofs4:pid:11998:autofs_fill_super: called with bogus options [ 340.686988] device bridge_slave_1 left promiscuous mode [ 340.693399] bridge0: port 2(bridge_slave_1) entered disabled state 12:40:54 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 340.762925] IPVS: ftp: loaded support on port[0] = 21 [ 340.794948] device bridge_slave_0 left promiscuous mode [ 340.820341] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.885901] autofs4:pid:12011:autofs_fill_super: called with bogus options [ 341.020933] team0 (unregistering): Port device team_slave_1 removed [ 341.048366] team0 (unregistering): Port device team_slave_0 removed [ 341.061718] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 341.106837] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 341.175638] bond0 (unregistering): Released all slaves [ 342.008559] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.015076] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.023080] device bridge_slave_0 entered promiscuous mode [ 342.071798] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.078267] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.086315] device bridge_slave_1 entered promiscuous mode [ 342.136112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 342.182717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 342.327247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 342.376499] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 342.425347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 342.433154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.609617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 342.617379] team0: Port device team_slave_0 added [ 342.661830] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 342.669228] team0: Port device team_slave_1 added [ 342.712853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.742312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.774927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 342.782280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.791042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.828917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 342.836129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.844274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.191821] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.198181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.204870] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.211240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.218479] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 343.250806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.179955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.272158] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 344.365411] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 344.371743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.378726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.483380] 8021q: adding VLAN 0 to HW filter on device team0 12:40:59 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:59 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667304", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x8035b}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000800)={0x17, 0x0, 0x7f}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000680)) syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc47c79d163d33e65b94e9d83219682611a0c3bad405dd129164f9a9e8df016c431f0205513cd65552f7306846d27a8b69ae9c743171be05cde2e8297b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f00000009c0), 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000a40)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r3, 0x7ff}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000008c0)={r0, r2}) 12:40:59 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 345.033808] autofs4:pid:12292:autofs_fill_super: called with bogus options [ 345.042226] autofs4:pid:12294:autofs_fill_super: called with bogus options 12:40:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x8035b}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000800)={0x17, 0x0, 0x7f}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000680)) syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc47c79d163d33e65b94e9d83219682611a0c3bad405dd129164f9a9e8df016c431f0205513cd65552f7306846d27a8b69ae9c743171be05cde2e8297b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f00000009c0), 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000a40)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r3, 0x7ff}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000008c0)={r0, r2}) [ 345.101219] autofs4:pid:12302:autofs_fill_super: called with bogus options [ 345.119401] overlayfs: missing 'lowerdir' 12:40:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:40:59 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:59 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179ff", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x8035b}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000800)={0x17, 0x0, 0x7f}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000680)) syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc47c79d163d33e65b94e9d83219682611a0c3bad405dd129164f9a9e8df016c431f0205513cd65552f7306846d27a8b69ae9c743171be05cde2e8297b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f00000009c0), 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000a40)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r3, 0x7ff}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000008c0)={r0, r2}) 12:40:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:40:59 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:59 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179eb", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:40:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) [ 345.569173] autofs4:pid:12356:autofs_fill_super: called with bogus options 12:40:59 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:59 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 345.834636] autofs4:pid:12368:autofs_fill_super: called with bogus options 12:40:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x8035b}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000800)={0x17, 0x0, 0x7f}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000680)) syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc47c79d163d33e65b94e9d83219682611a0c3bad405dd129164f9a9e8df016c431f0205513cd65552f7306846d27a8b69ae9c743171be05cde2e8297b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f00000009c0), 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000a40)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r3, 0x7ff}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000008c0)={r0, r2}) 12:40:59 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:40:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 346.007929] autofs4:pid:12385:autofs_fill_super: called with bogus options [ 346.024030] overlayfs: missing 'lowerdir' [ 346.091272] autofs4:pid:12391:autofs_fill_super: called with bogus options 12:41:00 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:41:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x8035b}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000800)={0x17, 0x0, 0x7f}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000680)) syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc47c79d163d33e65b94e9d83219682611a0c3bad405dd129164f9a9e8df016c431f0205513cd65552f7306846d27a8b69ae9c743171be05cde2e8297b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f00000009c0), 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000a40)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r3, 0x7ff}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000008c0)={r0, r2}) 12:41:00 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:41:00 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 346.490198] autofs4:pid:12416:autofs_fill_super: called with bogus options [ 346.525526] autofs4:pid:12422:autofs_fill_super: called with bogus options [ 346.528399] overlayfs: missing 'lowerdir' 12:41:00 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:00 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:41:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a00)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x8035b}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000800)={0x17, 0x0, 0x7f}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000680)) syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc47c79d163d33e65b94e9d83219682611a0c3bad405dd129164f9a9e8df016c431f0205513cd65552f7306846d27a8b69ae9c743171be05cde2e8297b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f00000009c0), 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000000a40)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a80)={r3, 0x7ff}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000008c0)={r0, r2}) 12:41:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 346.739427] autofs4:pid:12434:autofs_fill_super: called with bogus options 12:41:00 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 346.816991] overlayfs: missing 'lowerdir' 12:41:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 346.935893] IPVS: ftp: loaded support on port[0] = 21 [ 346.956306] autofs4:pid:12455:autofs_fill_super: called with bogus options [ 347.018835] autofs4:pid:12463:autofs_fill_super: called with bogus options [ 347.055537] overlayfs: missing 'lowerdir' [ 347.071261] device bridge_slave_1 left promiscuous mode [ 347.076833] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.151359] device bridge_slave_0 left promiscuous mode [ 347.156900] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.229766] team0 (unregistering): Port device team_slave_1 removed [ 347.246098] team0 (unregistering): Port device team_slave_0 removed [ 347.260177] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 347.314226] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 347.380686] bond0 (unregistering): Released all slaves [ 348.104021] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.111118] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.118590] device bridge_slave_0 entered promiscuous mode [ 348.167602] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.174230] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.182215] device bridge_slave_1 entered promiscuous mode [ 348.232506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 348.279649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 348.426943] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.483015] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 348.532192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 348.539057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.586963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 348.594195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.745065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 348.752400] team0: Port device team_slave_0 added [ 348.800866] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 348.808297] team0: Port device team_slave_1 added [ 348.845693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.879100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.915250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 348.922703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.934500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.975707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 348.982920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.994787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.315170] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.321608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.328185] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.334591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.342042] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 349.459965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.358519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.459230] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 350.555900] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 350.562275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.569280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.666767] 8021q: adding VLAN 0 to HW filter on device team0 12:41:05 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:05 executing program 1: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000007c0)={'mangle\x00', 0x28, "afcd9689f612e19f9711a10421cee29c98393b147ee76ebf9991aba665fce45d64bf6429b42cb2e3"}, &(0x7f0000000840)=0x4c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000022042134c41101edccda98b684000000000000000000f0"], 0x1}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x3, 0x2000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180)=0x3, 0x4) socket$inet(0x2, 0x4, 0x61) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) 12:41:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0}) 12:41:05 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsh', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:41:05 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\b', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 351.331907] autofs4:pid:12752:autofs_fill_super: called with bogus options 12:41:05 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 351.377764] autofs4:pid:12764:autofs_fill_super: called with bogus options 12:41:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:05 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:41:05 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179ff", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:05 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 351.527829] autofs4:pid:12772:autofs_fill_super: called with bogus options [ 351.648415] autofs4:pid:12784:autofs_fill_super: called with bogus options 12:41:05 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 351.773657] autofs4:pid:12800:autofs_fill_super: called with bogus options [ 351.784414] autofs4:pid:12807:autofs_fill_super: called with bogus options [ 351.881148] autofs4:pid:12813:autofs_fill_super: called with bogus options 12:41:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002e00190100000000000000000300c763041e5600"], 0x18}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x13}, [@typed={0xc, 0x7, @str="2621d970726f6300"}, @generic="a685215c2d12f86323030c2fca3008ba287f8744087b5c681c068e126bde6f10de667e2fc13df566d5ad4ced69821b040115b48f20f3dd7e881f444f9a24ad50f5f3fb51ae5f274708ea8228a0f1541ee132ade6ff48f0a5e78e43ee61bd0e7e9e0e3437be9891a6ef2d65784576c45275605ad60b3d29a0fd4dc65ed9f62ff3bb50f662995f2c2e2c7fed8bfb9c8f64013e26305211fb6f2aeb43e87ad00038fe40fcc6426b5d6f80b4fb23e6c4270a1a23e29b5966399851c5118f82baf8d40418fbde6af47b6abe570326a0"]}, 0xf0}, 0x1, 0x0, 0x0, 0x4044}, 0x810) 12:41:05 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:41:05 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:05 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 352.012798] autofs4:pid:12828:autofs_fill_super: called with bogus options [ 352.032572] overlayfs: missing 'lowerdir' 12:41:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsL', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[]}) close(r2) close(r1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) [ 352.062132] autofs4:pid:12836:autofs_fill_super: called with bogus options [ 352.079388] autofs4:pid:12840:autofs_fill_super: called with bogus options 12:41:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 352.131389] autofs4:pid:12845:autofs_fill_super: called with bogus options 12:41:06 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:06 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667302", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001580)={[{@nobarrier='nobarrier'}]}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x545, 0x7f, 0x200, 0x8, 0x0, 0x5da3, 0x80000, 0x3, 0x9, 0x1, 0x9, 0x20, 0x5, 0x9, 0x4, 0x79c, 0x9, 0x800, 0x3, 0x9, 0xfe23, 0x0, 0x8, 0x5, 0x6, 0x2, 0x1f, 0x1, 0x7, 0x6, 0x8, 0x9, 0xfffffffffffff634, 0x3, 0x1c5, 0x9, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8000, 0x100, 0x2, 0x7, 0x9, 0x401, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x10000, 0x200000) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x8, 0x200) r0 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x80003) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x720) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', 'nobarrier'}, &(0x7f0000000080)='gfs2\x00', 0x5, 0x1) [ 352.339889] autofs4:pid:12872:autofs_fill_super: called with bogus options 12:41:06 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 352.385436] overlayfs: missing 'lowerdir' [ 352.387775] autofs4:pid:12880:autofs_fill_super: called with bogus options 12:41:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 352.469116] overlayfs: missing 'lowerdir' 12:41:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:06 executing program 1: sched_setaffinity(0x0, 0xffffffffffffff8e, &(0x7f0000000580)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0xa) r4 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000004c0)={0x8}) getsockname$inet6(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) sendto$inet(r3, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x3}, 0xc26, 0x9, 0x4}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x332, 0x3, 0x21}, 0x4, 0x3ff, 0xffffffffffffff80}) r5 = gettid() ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000005c0)=""/74) capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) fcntl$setlease(r0, 0x400, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/105, 0x69) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000380)) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getpgid(0x0) [ 352.568790] autofs4:pid:12903:autofs_fill_super: called with bogus options [ 352.580231] autofs4:pid:12901:autofs_fill_super: called with bogus options 12:41:06 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:06 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsL', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 352.632432] autofs4:pid:12912:autofs_fill_super: called with bogus options 12:41:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x410, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:41:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:06 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:06 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 352.868328] autofs4:pid:12943:autofs_fill_super: called with bogus options [ 352.897438] autofs4:pid:12946:autofs_fill_super: called with bogus options 12:41:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 352.998684] autofs4:pid:12952:autofs_fill_super: called with bogus options 12:41:07 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) [ 353.055437] overlayfs: missing 'lowerdir' [ 353.063544] autofs4:pid:12964:autofs_fill_super: called with bogus options 12:41:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 353.179712] autofs4:pid:12974:autofs_fill_super: called with bogus options [ 353.201055] autofs4:pid:12977:autofs_fill_super: called with bogus options [ 353.210799] autofs4:pid:12979:autofs_fill_super: called with bogus options 12:41:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0x0, 0x7fffffff}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, [{}, {0xffffffffffffad01}, {}, {}, {}, {}, {0xffffffffffffffd0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0x0, 0x4}, {0x0, 0x0, 0x2}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:41:07 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:07 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12:41:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:07 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 353.475785] autofs4:pid:13000:autofs_fill_super: called with bogus options [ 353.492665] overlayfs: missing 'lowerdir' [ 353.509331] autofs4:pid:13003:autofs_fill_super: called with bogus options [ 353.554062] autofs4:pid:13012:autofs_fill_super: called with bogus options 12:41:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:07 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 353.646475] autofs4:pid:13022:autofs_fill_super: called with bogus options 12:41:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:07 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}}, 0x4000) [ 353.725754] autofs4:pid:13029:autofs_fill_super: called with bogus options [ 353.762093] overlayfs: missing 'lowerdir' 12:41:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x182) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x0, 'fo\x00', 0x23}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x0, 0x20}}, 0x44) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/118) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 353.769737] autofs4:pid:13032:autofs_fill_super: called with bogus options 12:41:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:07 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 353.875851] autofs4:pid:13043:autofs_fill_super: called with bogus options 12:41:07 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667306", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 353.940696] autofs4:pid:13053:autofs_fill_super: called with bogus options 12:41:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 353.987077] autofs4:pid:13057:autofs_fill_super: called with bogus options [ 354.014336] overlayfs: missing 'lowerdir' 12:41:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:08 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\a', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}}, 0x4000) 12:41:08 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:08 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 354.228992] autofs4:pid:13080:autofs_fill_super: called with bogus options 12:41:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 354.334450] overlayfs: missing 'lowerdir' 12:41:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 354.385452] autofs4:pid:13105:autofs_fill_super: called with bogus options 12:41:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x182) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x0, 'fo\x00', 0x23}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x0, 0x20}}, 0x44) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/118) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:41:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:08 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 354.451857] autofs4:pid:13111:autofs_fill_super: called with bogus options [ 354.485393] autofs4:pid:13116:autofs_fill_super: called with bogus options 12:41:08 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 354.579499] autofs4:pid:13121:autofs_fill_super: called with bogus options 12:41:08 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsz', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:08 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000002840), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000200)) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000140)) tkill(r0, 0x9) [ 354.691832] autofs4:pid:13139:autofs_fill_super: called with bogus options [ 354.700222] overlayfs: missing 'lowerdir' [ 354.728940] autofs4:pid:13142:autofs_fill_super: called with bogus options 12:41:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:08 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:09 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000002840), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000200)) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000140)) tkill(r0, 0x9) 12:41:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ipv6_route\x00') preadv(r0, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1000000000000317, 0x400000000000) [ 355.052961] autofs4:pid:13176:autofs_fill_super: called with bogus options [ 355.079363] overlayfs: missing 'lowerdir' 12:41:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\a', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:09 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c61798c", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 355.175750] autofs4:pid:13195:autofs_fill_super: called with bogus options 12:41:09 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0x0, 0x7fffffff}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x1}, {0x3}, {}, {0xffffffffffffffd0, 0x0, 0x4}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x7}, {0x0, 0x7fff}, {0x0, 0x1}, {0x3d, 0x0, 0x0, [], 0x6}, {0x0, 0x0, 0x6}, {}, {0x0, 0x4}, {0x0, 0x0, 0x2}, {}, {0x8001}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x7fffffff}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:41:09 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000002840), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000200)) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000140)) tkill(r0, 0x9) 12:41:09 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667306", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) getuid() syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x1, &(0x7f00000004c0)={[{@utf8='utf8'}, {@disable_sparse_yes='disable_sparse=yes'}, {@dmask={'dmask', 0x3d, 0x2}}], [{@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}, {@measure='measure'}]}) [ 355.545539] autofs4:pid:13246:autofs_fill_super: called with bogus options 12:41:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\v', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:09 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180)) read(r0, &(0x7f0000000400)=""/100, 0x64) socket$inet6(0xa, 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x350, 0x4a0, 0x108, 0x590, 0x350, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, &(0x7f0000002040), {[{{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@ipv4}}}, {{@uncond, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00'}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@local}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffffffffffffa) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f0000002b00)=""/255) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "5e7d3490b269f2ba0a9488f234a1f4cd"}, 0x15, 0x0) [ 355.668438] overlayfs: missing 'lowerdir' [ 355.685680] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 12:41:09 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 355.842543] ntfs: (device loop2): parse_options(): Unrecognized mount option obj_role. [ 355.854444] autofs4:pid:13286:autofs_fill_super: called with bogus options [ 355.918495] overlayfs: missing 'lowerdir' 12:41:09 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 355.965025] autofs4:pid:13306:autofs_fill_super: called with bogus options [ 355.982745] overlayfs: missing 'lowerdir' 12:41:10 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 356.018421] autofs4:pid:13312:autofs_fill_super: called with bogus options 12:41:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 356.060286] autofs4:pid:13314:autofs_fill_super: called with bogus options 12:41:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCFLSH(r1, 0x540b, 0xffffffff) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0xd6a, &(0x7f0000000340)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x3, 0xa, [0x80000000, 0x8, 0x8000, 0x9, 0x1dd, 0x2, 0x3, 0x7, 0x200c, 0xd5cf]}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @remote}}}, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x401, {0x2, 0x0, @dev}, {0x2, 0x4e21, @local}, {0x2, 0x0, @loopback}, 0x0, 0x1, 0xfff, 0x6ea6, 0x1f, 0x0, 0x2, 0x1380000000000000, 0x600000}) dup3(r0, r6, 0x80000) fcntl$getflags(r2, 0x408) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c9", 0x10}], 0xa00005, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20, &(0x7f0000000300)={'trans=unix,', {[{@mmap='mmap'}, {@access_user='access=user'}, {@access_client='access=client'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) [ 356.152647] overlayfs: missing 'lowerdir' 12:41:10 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\n', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 356.181151] autofs4:pid:13336:autofs_fill_super: called with bogus options 12:41:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:10 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179f6", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) getitimer(0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) [ 356.272300] autofs4:pid:13344:autofs_fill_super: called with bogus options 12:41:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 356.518418] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 12:41:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x182) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x0, @remote, 0x0, 0x4, 'fo\x00', 0x23}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x0, 0x20}}, 0x44) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/118) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f34"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 356.584028] autofs4:pid:13367:autofs_fill_super: called with bogus options 12:41:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:10 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\b', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 356.833302] autofs4:pid:13391:autofs_fill_super: called with bogus options 12:41:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCFLSH(r1, 0x540b, 0xffffffff) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0xd6a, &(0x7f0000000340)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x3, 0xa, [0x80000000, 0x8, 0x8000, 0x9, 0x1dd, 0x2, 0x3, 0x7, 0x200c, 0xd5cf]}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @remote}}}, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x401, {0x2, 0x0, @dev}, {0x2, 0x4e21, @local}, {0x2, 0x0, @loopback}, 0x0, 0x1, 0xfff, 0x6ea6, 0x1f, 0x0, 0x2, 0x1380000000000000, 0x600000}) dup3(r0, r6, 0x80000) fcntl$getflags(r2, 0x408) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c9", 0x10}], 0xa00005, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20, &(0x7f0000000300)={'trans=unix,', {[{@mmap='mmap'}, {@access_user='access=user'}, {@access_client='access=client'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) 12:41:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:10 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 356.930857] autofs4:pid:13393:autofs_fill_super: called with bogus options [ 357.137612] overlayfs: missing 'lowerdir' 12:41:11 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 357.463071] overlayfs: missing 'lowerdir' [ 357.538975] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 12:41:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000100)={0x8, 0x1}, 0x0) 12:41:11 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179ff", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:11 executing program 2: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0xbef1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000018c0)={{{@in=@rand_addr, @in6=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000019c0)=0xe8) clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x0, 0x10000, &(0x7f0000002f80)={0x0, r1+30000000}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000003180)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000058c0)={{{@in, @in=@remote}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000059c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005a00)={0x0, @remote, @dev}, &(0x7f0000005a40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006540)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000000)=0x111) 12:41:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000013c0)="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", 0x2da}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 12:41:11 executing program 2: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0xbef1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000018c0)={{{@in=@rand_addr, @in6=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000019c0)=0xe8) clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x0, 0x10000, &(0x7f0000002f80)={0x0, r1+30000000}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000003180)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000058c0)={{{@in, @in=@remote}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000059c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005a00)={0x0, @remote, @dev}, &(0x7f0000005a40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006540)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000000)=0x111) 12:41:12 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofst', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:12 executing program 1: 12:41:12 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 358.312160] overlayfs: missing 'lowerdir' [ 358.346439] device bridge_slave_1 left promiscuous mode [ 358.354784] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.431023] device bridge_slave_0 left promiscuous mode [ 358.436546] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.467880] IPVS: ftp: loaded support on port[0] = 21 [ 358.549040] team0 (unregistering): Port device team_slave_1 removed [ 358.567067] team0 (unregistering): Port device team_slave_0 removed [ 358.582456] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 358.626270] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 358.721880] bond0 (unregistering): Released all slaves 12:41:12 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f00000002c0)="2400000021002551071c0165ff0ffc020200000008100f0f0ee1000c08001000ffffffebbc0000008f3943793a5ea67658cb22b79489bbdd14f6fd59b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c483daabb7e919e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c6616277985ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7e060f433314f5a171b18", 0xe0) 12:41:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f00000009c0)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=""/80, 0x50}, 0x0) 12:41:12 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c61797f", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x19) sendto$inet6(r0, &(0x7f0000000080), 0x3f45f9799dbcefc4, 0x200408d9, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xffffffffffffffff}, 0x1c) 12:41:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fdc2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_create1(0x0) gettid() [ 359.208738] IPVS: ftp: loaded support on port[0] = 21 [ 360.767681] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.774241] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.781906] device bridge_slave_0 entered promiscuous mode [ 360.899165] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.914617] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.931576] device bridge_slave_1 entered promiscuous mode [ 361.007940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 361.101017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 361.216623] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.239948] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.247389] device bridge_slave_0 entered promiscuous mode [ 361.327500] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.351050] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.358454] device bridge_slave_1 entered promiscuous mode [ 361.377473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 361.406399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 361.433031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 361.452043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 361.523184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 361.540730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.620278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 361.627361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.640137] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 361.726326] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 361.819444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 361.826981] team0: Port device team_slave_0 added [ 361.872416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 361.879691] team0: Port device team_slave_1 added [ 361.932359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.983026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.009636] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 362.017084] team0: Port device team_slave_0 added [ 362.046529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 362.054142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.062675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.075106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 362.083057] team0: Port device team_slave_1 added [ 362.101266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 362.108676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.125921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.169946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.226309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.287192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 362.296018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.305317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.320179] device bridge_slave_1 left promiscuous mode [ 362.325687] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.380719] device bridge_slave_0 left promiscuous mode [ 362.386159] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.442075] team0 (unregistering): Port device team_slave_1 removed [ 362.453152] team0 (unregistering): Port device team_slave_0 removed [ 362.465675] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 362.535487] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 362.601143] bond0 (unregistering): Released all slaves [ 362.637907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 362.646016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.661445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.113809] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.120252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.126930] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.133371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.164503] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 363.389973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.427007] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.433469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.440205] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.446581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.467933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 364.430153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.615504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.754170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.791862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 365.924168] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 365.963071] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 365.969249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.977911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.112035] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 366.118223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.135444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.154721] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.292147] 8021q: adding VLAN 0 to HW filter on device team0 12:41:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:21 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c6179ff", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:21 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000480)) 12:41:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 367.328067] autofs4:pid:14073:autofs_fill_super: called with bogus options [ 367.367231] autofs4:pid:14078:autofs_fill_super: called with bogus options [ 367.435997] autofs4:pid:14085:autofs_fill_super: called with bogus options 12:41:21 executing program 2: 12:41:21 executing program 1: 12:41:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:21 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 367.477628] autofs4:pid:14089:autofs_fill_super: called with bogus options 12:41:21 executing program 2: [ 367.561264] autofs4:pid:14099:autofs_fill_super: called with bogus options 12:41:21 executing program 1: 12:41:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 367.606354] overlayfs: missing 'lowerdir' [ 367.606645] autofs4:pid:14105:autofs_fill_super: called with bogus options [ 367.640938] autofs4:pid:14111:autofs_fill_super: called with bogus options 12:41:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:21 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c617902", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:21 executing program 2: 12:41:21 executing program 1: [ 367.756333] autofs4:pid:14122:autofs_fill_super: called with bogus options 12:41:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006000), 0x1000) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0x0, 0x3, {0x0, 0x7}}, 0x20) 12:41:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 367.810143] autofs4:pid:14127:autofs_fill_super: called with bogus options [ 367.848817] autofs4:pid:14123:autofs_fill_super: called with bogus options 12:41:21 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0xb, 0x0, 0xf}, {}, {}, {0x8, 0x57}, {}, {0x2f}}}}}}, &(0x7f0000000000)) 12:41:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:22 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 368.010063] autofs4:pid:14150:autofs_fill_super: called with bogus options [ 368.038630] autofs4:pid:14164:autofs_fill_super: called with bogus options 12:41:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:22 executing program 1: socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000200)) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)) tkill(r0, 0x9) [ 368.171326] overlayfs: missing 'lowerdir' [ 368.181253] autofs4:pid:14180:autofs_fill_super: called with bogus options [ 368.201941] autofs4:pid:14183:autofs_fill_super: called with bogus options 12:41:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c617906", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:22 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 368.223913] autofs4:pid:14188:autofs_fill_super: called with bogus options 12:41:22 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 368.347227] autofs4:pid:14209:autofs_fill_super: called with bogus options [ 368.352472] autofs4:pid:14202:autofs_fill_super: called with bogus options [ 368.368186] autofs4:pid:14212:autofs_fill_super: called with bogus options [ 368.487868] autofs4:pid:14224:autofs_fill_super: called with bogus options [ 368.532547] autofs4:pid:14228:autofs_fill_super: called with bogus options 12:41:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x3f1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x800000001, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:41:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x19) sendto$inet6(r0, &(0x7f0000000080), 0x3f45f9799dbcefc4, 0x200408d9, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xffffffffffffffff}, 0x1c) 12:41:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:22 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f66737f", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:22 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsH', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 368.902984] overlayfs: missing 'lowerdir' 12:41:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:22 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:41:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 368.995203] autofs4:pid:14271:autofs_fill_super: called with bogus options 12:41:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:23 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:23 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:23 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.210629] overlayfs: missing 'lowerdir' [ 369.223764] autofs4:pid:14295:autofs_fill_super: called with bogus options [ 369.244223] autofs4:pid:14302:autofs_fill_super: called with bogus options 12:41:23 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.262358] overlayfs: missing 'lowerdir' [ 369.264726] autofs4:pid:14304:autofs_fill_super: called with bogus options [ 369.316771] autofs4:pid:14309:autofs_fill_super: called with bogus options 12:41:23 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:23 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 369.369478] autofs4:pid:14313:autofs_fill_super: called with bogus options [ 369.400948] autofs4:pid:14317:autofs_fill_super: called with bogus options 12:41:23 executing program 2: sched_setaffinity(0x0, 0xffffffffffffff8e, &(0x7f0000000580)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0xa) r4 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000004c0)={0x8}) getsockname$inet6(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) sendto$inet(r3, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x3}, 0xc26, 0x9, 0x4}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x332, 0x3, 0x21}, 0x4, 0x3ff, 0xffffffffffffff80}) r5 = gettid() ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000005c0)=""/74) capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) fcntl$setlease(r0, 0x400, 0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/105, 0x69) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000380)) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getpgid(0x0) 12:41:23 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.442303] overlayfs: missing 'lowerdir' [ 369.446991] autofs4:pid:14324:autofs_fill_super: called with bogus options [ 369.469569] autofs4:pid:14328:autofs_fill_super: called with bogus options [ 369.476400] autofs4:pid:14330:autofs_fill_super: called with bogus options 12:41:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:23 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 369.573976] autofs4:pid:14336:autofs_fill_super: called with bogus options 12:41:23 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.628655] autofs4:pid:14345:autofs_fill_super: called with bogus options 12:41:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.682506] overlayfs: missing 'lowerdir' 12:41:23 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) capset(&(0x7f0000000300)={0x20071026, r2}, &(0x7f0000000440)={0xffffffffffffff81, 0x927, 0x617, 0x3ff, 0x0, 0x6}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:23 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:23 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.797066] autofs4:pid:14366:autofs_fill_super: called with bogus options 12:41:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:23 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 369.944791] autofs4:pid:14379:autofs_fill_super: called with bogus options 12:41:23 executing program 1 (fault-call:5 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 369.999690] overlayfs: missing 'lowerdir' [ 370.005954] autofs4:pid:14388:autofs_fill_super: called with bogus options [ 370.007353] autofs4:pid:14384:autofs_fill_super: called with bogus options [ 370.075870] autofs4:pid:14393:autofs_fill_super: called with bogus options [ 370.107809] autofs4:pid:14396:autofs_fill_super: called with bogus options [ 370.192466] FAULT_INJECTION: forcing a failure. [ 370.192466] name failslab, interval 1, probability 0, space 0, times 0 [ 370.282912] CPU: 0 PID: 14399 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #61 [ 370.290249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.299623] Call Trace: [ 370.302246] dump_stack+0x1c4/0x2b4 [ 370.305903] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.311132] should_fail.cold.4+0xa/0x17 [ 370.315214] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.320406] ? graph_lock+0x170/0x170 [ 370.324225] ? __fget+0x4d1/0x740 [ 370.327709] ? find_held_lock+0x36/0x1c0 [ 370.331806] ? ___might_sleep+0x1ed/0x300 [ 370.335974] ? arch_local_save_flags+0x40/0x40 [ 370.340590] __should_failslab+0x124/0x180 [ 370.344852] should_failslab+0x9/0x14 [ 370.348669] __kmalloc_track_caller+0x2d0/0x750 [ 370.353360] ? usercopy_warn+0x110/0x110 [ 370.357526] ? map_update_elem+0x24a/0xd50 [ 370.361789] memdup_user+0x2c/0xa0 [ 370.365357] map_update_elem+0x24a/0xd50 [ 370.369446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.375007] __x64_sys_bpf+0x32d/0x510 [ 370.378915] ? bpf_prog_get+0x20/0x20 [ 370.382760] do_syscall_64+0x1b9/0x820 [ 370.386671] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 370.392057] ? syscall_return_slowpath+0x5e0/0x5e0 [ 370.396998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.401860] ? trace_hardirqs_on_caller+0x310/0x310 [ 370.406895] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 370.411926] ? prepare_exit_to_usermode+0x291/0x3b0 [ 370.416964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.421830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.427029] RIP: 0033:0x457569 [ 370.430237] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.449163] RSP: 002b:00007f96c82d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.456893] RAX: ffffffffffffffda RBX: 00007f96c82d8c90 RCX: 0000000000457569 [ 370.464170] RDX: 000000000000002c RSI: 0000000020003000 RDI: 0000000000000002 [ 370.471448] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 12:41:24 executing program 2: execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000080), &(0x7f00000002c0)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xf1, 0x105041) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x0, 0x4, 0x5}) fcntl$notify(r1, 0x402, 0x2) mlock(&(0x7f00005ff000/0x4000)=nil, 0x4000) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000540), 0x1, 0x2) 12:41:24 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) getresuid(&(0x7f0000000440), &(0x7f0000000880), &(0x7f00000008c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)='9p\x00', 0x20, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@subj_type={'subj_type', 0x3d, 'security'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x0, {0x0, 0x0, 0x80000}, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa00000000000, 0x0, 0x0, 0x0, 0x4}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000780)="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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:24 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:24 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:24 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673f6", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 370.478730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96c82d96d4 [ 370.486014] R13: 00000000004bd8da R14: 00000000004cc250 R15: 0000000000000006 12:41:24 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:24 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsl', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 370.539655] autofs4:pid:14410:autofs_fill_super: called with bogus options [ 370.562979] overlayfs: missing 'lowerdir' 12:41:24 executing program 2: socketpair$inet(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 12:41:24 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)="6f7665726c617903", 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:24 executing program 5: pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766446e7f3d", @ANYRESHEX=r1, @ANYBLOB=',noextend,dont_hash,dont_measure,smackfshat=9p\x00,fscontext=sysadm_u,permit_directio,dont_hash,context=system_u,func=FIRMWARE_CHECK,\x00']) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0xd) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}, {0x77359400}}) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) write$P9_RCREATE(r1, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0xa, 0x2, 0x5}, 0x3}}, 0x18) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 370.682987] autofs4:pid:14432:autofs_fill_super: called with bogus options 12:41:24 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 370.775282] 9pnet: Insufficient options for proto=fd [ 370.848997] 9pnet: Insufficient options for proto=fd 12:41:24 executing program 1 (fault-call:5 fault-nth:1): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000440)=0xe8) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="cde78f0ffe669e96b1f552d7ab04d1ad642a7db88354a0d05ad337c246edb1ae48c15a7cedf39af3b697c5c52c4dbc0c0c69ef994691bf91610848707e2ac23969390e2db8fb2c8b59", 0x49, 0x4}], 0x3410, &(0x7f0000000480)={[{@case_sensitive_no='case_sensitive=no'}, {@show_sys_files_no='show_sys_files=no'}, {@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}], [{@fsname={'fsname', 0x3d, 'logon\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x74, 0x66, 0x64, 0x64, 0x34, 0x61, 0x0, 0x73], 0x2d, [0x3b, 0x0, 0x76, 0x62], 0x2d, [0x3b, 0x66, 0x64], 0x2d, [0x0, 0x0, 0x3f, 0x3d], 0x2d, [0x63, 0x77, 0x0, 0x32, 0x39, 0x77, 0x62, 0x37]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x77, 0x7f, 0x37, 0x73, 0x64, 0x31, 0x77], 0x2d, [0x62, 0x34, 0x33, 0x62], 0x2d, [0x67, 0x0, 0x37, 0x62], 0x2d, [0x36, 0x38, 0x62, 0x38], 0x2d, [0x73, 0x7f, 0x30, 0x36, 0x61, 0x63, 0x63, 0x63]}}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x61, 0x0, 0x61, 0x36, 0x0, 0x77], 0x2d, [0x66, 0x76, 0x77, 0x38], 0x2d, [0x0, 0x66, 0x77, 0x77], 0x2d, [0x66, 0x61, 0x63, 0x65], 0x2d, [0x37, 0x77, 0x30, 0x63, 0x64, 0x32, 0x39, 0x74]}}}, {@dont_hash='dont_hash'}]}) r1 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$clear(0x7, r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66696c65556e0200993d2e0000000000000000000000000000"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file1\x00', 0x2004, 0xffffffffffffffff) getdents64(r2, &(0x7f0000000a00)=""/65, 0x18f) 12:41:24 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsz', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:24 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673f6", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:24 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 370.871768] autofs4:pid:14459:autofs_fill_super: called with bogus options [ 370.993850] overlayfs: failed to resolve 'fileUn': -2 12:41:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:25 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r2 = openat$cgroup_ro(r0, &(0x7f0000000980)='rdma.current\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)={&(0x7f0000000940)='./file0/file0\x00', r2}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = memfd_create(&(0x7f0000000300)='self*wlan1\x00', 0x2aff1571065f2601) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x3f}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={r4, 0x3, 0x2c}, 0xc) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0xc8001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000780)={0x5, 0x7f, 0x10001}) fcntl$getownex(r0, 0x10, &(0x7f0000000740)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f00000008c0)={0x1}) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) recvfrom(r2, &(0x7f0000000a00)=""/228, 0xe4, 0x10040, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:25 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667302", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 371.061121] overlayfs: missing 'lowerdir' [ 371.075294] FAULT_INJECTION: forcing a failure. [ 371.075294] name failslab, interval 1, probability 0, space 0, times 0 [ 371.087239] CPU: 1 PID: 14482 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #61 [ 371.094531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.094539] Call Trace: [ 371.094570] dump_stack+0x1c4/0x2b4 [ 371.094595] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.094629] should_fail.cold.4+0xa/0x17 [ 371.106789] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.106817] ? graph_lock+0x170/0x170 [ 371.106834] ? graph_lock+0x170/0x170 [ 371.106937] ? do_page_fault+0xf2/0x7e0 [ 371.136327] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.141087] ? find_held_lock+0x36/0x1c0 [ 371.145156] ? ___might_sleep+0x1ed/0x300 [ 371.149296] ? arch_local_save_flags+0x40/0x40 [ 371.153868] ? __do_page_fault+0x4a6/0xed0 [ 371.158098] __should_failslab+0x124/0x180 [ 371.162338] should_failslab+0x9/0x14 [ 371.166152] __kmalloc+0x2d4/0x760 [ 371.169684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.175211] ? _copy_from_user+0xdf/0x150 [ 371.179371] ? map_update_elem+0x325/0xd50 [ 371.183649] map_update_elem+0x325/0xd50 [ 371.187703] __x64_sys_bpf+0x32d/0x510 [ 371.191581] ? bpf_prog_get+0x20/0x20 [ 371.195405] do_syscall_64+0x1b9/0x820 [ 371.199434] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 371.204806] ? syscall_return_slowpath+0x5e0/0x5e0 [ 371.209722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.214559] ? trace_hardirqs_on_caller+0x310/0x310 [ 371.219563] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 371.224570] ? prepare_exit_to_usermode+0x291/0x3b0 [ 371.229594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.234450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.239627] RIP: 0033:0x457569 [ 371.242811] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.261728] RSP: 002b:00007f96c82d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.269427] RAX: ffffffffffffffda RBX: 00007f96c82d8c90 RCX: 0000000000457569 [ 371.276685] RDX: 000000000000002c RSI: 0000000020003000 RDI: 0000000000000002 [ 371.283942] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 371.291205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96c82d96d4 [ 371.298477] R13: 00000000004bd8da R14: 00000000004cc250 R15: 0000000000000006 [ 371.308566] overlayfs: failed to resolve 'fileUn': -2 12:41:25 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsl', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000600)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c", 0xca, 0x10000}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="376ce6e6654200"]) [ 371.421469] autofs4:pid:14516:autofs_fill_super: called with bogus options 12:41:25 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:25 executing program 1 (fault-call:5 fault-nth:2): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 371.500743] autofs4:pid:14522:autofs_fill_super: called with bogus options 12:41:25 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x100000001, 0x280000) r2 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000300)='\x00', 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r2, r3) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) pselect6(0x40, &(0x7f0000000380)={0x2, 0x9, 0x9, 0x5, 0x6a8, 0x4, 0x2, 0x5}, &(0x7f00000003c0)={0x7, 0x400, 0x0, 0x0, 0x1, 0x3, 0x8000, 0x9}, &(0x7f0000000840)={0x8, 0x8, 0x3, 0x6, 0x100, 0x5, 0x0, 0x1}, &(0x7f0000000880)={0x77359400}, &(0x7f0000000940)={&(0x7f00000008c0)={0x1000000000000000}, 0x8}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7857a543eb51bf6aa85b63bc873f210200d0f07266646e6f3d8899820fd4dffdc5101dfc6e8a54c2a1844b258e1b2b9663243be8f449998a9cb8d1df87e0036583c20a7b35a50ebcc8cddd9935ae6859e411565b2b05409b7ba1cd5df008f1b908bf32", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,\x00']) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 371.572913] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 28 transid 756082810144684242 /dev/loop2 [ 371.607390] overlayfs: missing 'lowerdir' [ 371.671579] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 371.709217] autofs4:pid:14548:autofs_fill_super: called with bogus options 12:41:25 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667305", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 371.719624] BTRFS error (device loop2): superblock checksum mismatch 12:41:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:25 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 371.799952] BTRFS error (device loop2): open_ctree failed 12:41:25 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:25 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000000000000000000084cdcdca01948299f6ca4f8f0a206fddb33dc5db6c764f5bf9d4b0c6d21ba9b96616fcb3af22aa96861d61d7255a1e3d860900487c89b83f1cfdcd44576d3233b0e8f4a0f4436fd771ec96efacd06bc013082950a375e6901d760f6425287816e699e5054cd876327f62e597d43ed23aa111294bab890feeb83b42eae77b1d338c9c6d2497c74de40332a05e5939148601f885f06e13f15a6d91f0e440e2f69a17196c650be949f7d8e8d34d415d871a40f59d9dac9559993b9a02512419d2d166a0276f7dc3242dfd50cc8749d8d7dfaae7da8bc6e341cfb9"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) write$P9_RWALK(r1, &(0x7f0000000140)={0x57, 0x6f, 0x2, {0x6, [{0x4, 0x0, 0x8}, {0x45, 0x4, 0x4}, {0x4, 0x1, 0x1}, {0x8, 0x1, 0x7}, {0x44, 0x3, 0x5}, {0x0, 0x2, 0x4}]}}, 0x57) 12:41:25 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000280)) mkdir(&(0x7f0000000880)='./file0/file1\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x101040) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000580)={0x3, 0x0, [{0x5, 0x2, 0x0, 0x0, @sint={0x5, 0x9}}, {0xfffffffffffffffd, 0x3, 0x0, 0x0, @msi={0x10001, 0x800, 0xfff}}, {0x65, 0x3, 0x0, 0x0, @irqchip={0x6, 0x9}}]}) mount(&(0x7f0000000240), &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file1\x00', &(0x7f00000002c0)='fusectl\x00', 0x0, 0x0) r1 = socket(0x19, 0x80007, 0x3f) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='scalable\x00', 0x9) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) [ 371.964394] autofs4:pid:14580:autofs_fill_super: called with bogus options [ 371.991943] overlayfs: missing 'lowerdir' 12:41:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x8, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 372.054634] autofs4:pid:14589:autofs_fill_super: called with bogus options 12:41:26 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:26 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000000, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x7f, 0x64, 0x36, 0x73, 0x77, 0x31, 0x37], 0x2d, [0x36, 0x39, 0x35, 0x67], 0x2d, [0x33, 0x0, 0x76, 0x31], 0x2d, [0x3e64836e82f6b3b9, 0x3f, 0x77, 0x73], 0x2d, [0x66, 0x77, 0x63, 0x33, 0x38, 0x61, 0x63, 0x65]}}}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:26 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:26 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffff1d, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 372.218790] autofs4:pid:14609:autofs_fill_super: called with bogus options [ 372.284460] overlayfs: missing 'lowerdir' 12:41:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x6, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:26 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 372.350935] autofs4:pid:14624:autofs_fill_super: called with bogus options 12:41:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fdH,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:26 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 372.415231] autofs4:pid:14633:autofs_fill_super: called with bogus options 12:41:26 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 372.461490] autofs4:pid:14635:autofs_fill_super: called with bogus options 12:41:26 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 372.557622] 9pnet: Could not find request transport: fdH [ 372.567633] overlayfs: missing 'lowerdir' [ 372.578575] autofs4:pid:14655:autofs_fill_super: called with bogus options 12:41:26 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x12, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 372.648158] 9pnet: Could not find request transport: fdH [ 372.654937] overlayfs: missing 'lowerdir' 12:41:26 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = getuid() r5 = getgid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000700)={0x158, 0xffffffffffffffda, 0x3, [{{0x3, 0x1, 0x1, 0x9, 0x1, 0xa48, {0x6, 0x9, 0x75c, 0x1f, 0x2, 0x1f, 0x400, 0x5, 0x1eb, 0x9, 0x1606, r2, r3, 0x0, 0x4}}, {0x0, 0x2, 0x5, 0xebcc, 'rfdno'}}, {{0x4, 0x0, 0xfffffffffffffff8, 0x8, 0x8, 0x7, {0x0, 0x2, 0x0, 0x10001, 0xa3000000, 0x3f, 0x6, 0x1, 0x6, 0x7fffffff, 0x5, r4, r5, 0xfffffffffffffff7, 0xfffffffffffffffe}}, {0x3, 0x1, 0xe, 0x5bb, '])&,GPL,!{ppp1'}}]}, 0x158) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:26 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 372.806545] autofs4:pid:14672:autofs_fill_super: called with bogus options [ 372.903294] overlayfs: missing 'lowerdir' [ 372.947493] autofs4:pid:14687:autofs_fill_super: called with bogus options 12:41:27 executing program 2: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="696f636861727365743d63703433372c696f636861727365743d6d6163726f6d616e2c00e8356ff1947c237ae30dfa3cbac0ef2bc51c84f44b2e537370d2e54c5a937dd92b4cc27993287403cb3d5e70a495cacdd3ed71ebf60bbaa4f8b3953fc0100ab86835861d6223916f44449981a53900100c9764514e5eee1b46b257dcee2f38c2cb9a34dd1e40c2c38549cb0ac63a4c2bece0d47fe0c03ed3769262bbd8dbd6bce9c94bbaa98f6e5a37dc98cc818ed5c801d39eae82bb2128d44cf444f5df8d0e1a1496bb244c4a0aabb494c41597c5eb750ad7d170ca7e18f495115671ae01febaa39a44020f9c7bbadae0b90e0b206d83ce47fc2179495eb32574c9d10f83bef006956d5b8fad08a888f8fae2be5b6d38056bd5dc27055ef621cdf59d7c63aeb51105b963244d3cf660d677118cd3b4f92118736b2d9f174ef8c09cb0243196ada446dd74711a8d3f39ecc1f3624db476dfd91ef0063f8ecb97ba408d53bebd6d9611b1a866d2217a47bb085d3697000c4268386f1bdfcb770f44229f9cbe3545545da52d496a766ecc54a78aac7986b4d6f87e12318714f0813ee4d8a1a923ac2619c47c814c54d519c0545b50bd08e0fd0a41737f1e4abe1b4a553e17d0eff14b2e8c3dc33a8a60afdc191ab428ac47497f18fcca213ca66829ca6c5687c15ff474749b0a8c3b563b6291b1ace3d4d56c2217071d3233fdd3882ce6fd65d6ed2993f25e9681be70a07477a34cc7ecb18b39114bb795511548b19c0973f077e951832331c2577ef1b8cabd4a96f5b6acbd19a082fd121c62b6d0e7259faccaf47435dc3c24dbdfb46be040afe11a55a0788f5c4ed9935e0859340e77fa64554690b27ebeec7dc25793d58963b3ec6b875b285aece7627c2af9f2b3bb7bef4f63742adccef63c2bc916eaca12a9b62643f287dce74f991916211dd5ee89801456eeb7c651e1c36fafd0cead64c8a5daaf043d92560c3d4f4772be744e782542a3"]) 12:41:27 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:27 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:27 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xf, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:27 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000440)={'icmp6\x00'}, &(0x7f0000000700)=0x1e) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) fsetxattr(r1, &(0x7f0000000140)=@random={'security.', 'nodev\'\x00'}, &(0x7f0000000180)='mime_type\x00', 0xa, 0x2) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) [ 373.376668] autofs4:pid:14711:autofs_fill_super: called with bogus options [ 373.382880] autofs4:pid:14718:autofs_fill_super: called with bogus options [ 373.437605] overlayfs: missing 'lowerdir' 12:41:27 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:27 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:27 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000008c0)=0xe8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x4, r2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x2, 0x7, 0x0, 0x40, 0x800}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000300)={r4, 0x81, 0x2, 0x1, 0x5, 0x3}, &(0x7f0000000440)=0x14) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000940)) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f0000000980)={0xdd, 0x29, 0x2, {0x2, [{{0x5, 0x2, 0x1}, 0x20191bcb, 0x0, 0x7, './file0'}, {{0x0, 0x1}, 0x8, 0x1, 0xd, './file0/file0'}, {{0x29, 0x0, 0x5}, 0x7, 0x3, 0xd, './file0/file0'}, {{0x0, 0x3, 0x4}, 0x10000, 0xc47, 0xd, './file0/file0'}, {{0x1, 0x3, 0x8}, 0xa4a3, 0x9668, 0xd, './file0/file0'}, {{0x11, 0x4, 0x2}, 0x200, 0x8001, 0x7, './file0'}]}}, 0xdd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:27 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 373.582700] autofs4:pid:14741:autofs_fill_super: called with bogus options [ 373.592427] autofs4:pid:14743:autofs_fill_super: called with bogus options 12:41:27 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) sendmsg$netlink(r1, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x7, 0x1000}, 0x4) close(r0) close(r0) 12:41:27 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xe, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:27 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\t', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:27 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r1, r1) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x3, 0x0, [{}, {}, {}]}) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RREAD(r1, &(0x7f0000000700)={0xa6, 0x75, 0x1, {0x9b, "9843ee5216071cb2de21776f299ee05bd5cb08bad52d8b9a6a0f3b9d41570d11db51ae6efb07ab057d727efbd9bdb9d396f51ac380316fd8fb9d9d0802f8fcb5ef669a62bfd6304a59749042c39a637324c0ca15322b40fe294b9ed1a59fa9a4a91068d896f67f3124b3ad4b8d022fcb422b90371015ab9f8e09a3ca851464a5cb0bc022d01d32ee70e83f9bb74a5f8303de9028f5b4c6f37708c7"}}, 0xa6) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40003, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x1000, 0x2, 0x1]}) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0xa, "c276883753750ecc8bb50a32c799"}, 0x10, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x50, 0x0, [{0x80000001, 0x0, 0x6}]}) [ 373.859307] autofs4:pid:14773:autofs_fill_super: called with bogus options 12:41:27 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x60000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:27 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\r', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:28 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 374.019519] overlayfs: missing 'lowerdir' 12:41:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x10, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:28 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000000000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x3, 0x10000) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000400)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9a70, 0x121000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0xfffffffeffffffff) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:28 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:28 executing program 2: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x8, 0x0, 0x8, 0x7fff, 0x793ce29f, 0x3ad}) r1 = memfd_create(&(0x7f0000002b00)='syz', 0x5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000002b40)={0x0, 0x71, "387d83f7c11e3efce419d7ec010b40a9d3f19d039c8ea90f545ecfd9a2b86a12c3dbba4943de7a4c313ab941029b77f05934d65054a0445e84a08c1502a77714a36561b2ab70c2476f19f23f9e31c4396fe044d2dc9b6fda6c596a043d16786c713aaacfb3acbbf0fc58b8f4f1935f4929"}, &(0x7f0000002bc0)=0x79) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002c00)={r2, 0x81}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000006c0)={'syz', 0x0}) socketpair(0x0, 0x3, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x311000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="02000300a41401020002"], 0xe) 12:41:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0xe0003}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0x8090ae81, 0x70e000) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:28 executing program 2: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x8, 0x0, 0x8, 0x7fff, 0x793ce29f, 0x3ad}) r1 = memfd_create(&(0x7f0000002b00)='syz', 0x5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000002b40)={0x0, 0x71, "387d83f7c11e3efce419d7ec010b40a9d3f19d039c8ea90f545ecfd9a2b86a12c3dbba4943de7a4c313ab941029b77f05934d65054a0445e84a08c1502a77714a36561b2ab70c2476f19f23f9e31c4396fe044d2dc9b6fda6c596a043d16786c713aaacfb3acbbf0fc58b8f4f1935f4929"}, &(0x7f0000002bc0)=0x79) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002c00)={r2, 0x81}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000006c0)={'syz', 0x0}) socketpair(0x0, 0x3, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x311000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="02000300a41401020002"], 0xe) 12:41:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x5, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:28 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 374.605445] overlayfs: missing 'lowerdir' [ 374.683259] overlayfs: missing 'lowerdir' 12:41:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x10, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x80000000) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000000c0)={{}, "73797a310000000000000000000000000000000000000000000010008000", 0x10000000}) r3 = fcntl$getown(r0, 0x9) sched_setparam(r3, &(0x7f0000000080)=0xffffffffffffffe0) 12:41:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x9, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x2, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}}, 0xa0) r2 = memfd_create(&(0x7f0000000440)='eth0:lo\x00', 0x2) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r3 = memfd_create(&(0x7f0000000140)='cgroupusersecurity\x00', 0x7) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000700)) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) write$P9_RUNLINKAT(r1, &(0x7f0000000300)={0x7, 0x4d, 0x1}, 0x7) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xedc0, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofsH', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:29 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x11, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/235, 0xeb}}, 0x10) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000003c0)=0x30) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x8a02]}}) read(0xffffffffffffffff, &(0x7f0000000400)=""/120, 0x78) pkey_alloc(0x0, 0xffffffff) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0xffffffffffffffec) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) 12:41:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f00, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}], [{@uid_gt={'uid>', r2}}, {@permit_directio='permit_directio'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1fffff, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/235, 0xeb}}, 0x10) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000003c0)=0x30) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x8a02]}}) read(0xffffffffffffffff, &(0x7f0000000400)=""/120, 0x78) pkey_alloc(0x0, 0xffffffff) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0xffffffffffffffec) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) [ 375.772243] IPVS: ftp: loaded support on port[0] = 21 [ 375.887123] device bridge_slave_1 left promiscuous mode [ 375.894185] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.944910] device bridge_slave_0 left promiscuous mode [ 375.952022] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.955731] IPVS: ftp: loaded support on port[0] = 21 [ 376.037687] team0 (unregistering): Port device team_slave_1 removed [ 376.054724] team0 (unregistering): Port device team_slave_0 removed [ 376.067467] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 376.096514] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 376.141569] bond0 (unregistering): Released all slaves [ 377.415407] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.422101] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.429588] device bridge_slave_0 entered promiscuous mode [ 377.510390] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.523677] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.531977] device bridge_slave_1 entered promiscuous mode [ 377.618517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 377.659264] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.673488] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.688726] device bridge_slave_0 entered promiscuous mode [ 377.700530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 377.781419] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.787907] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.796277] device bridge_slave_1 entered promiscuous mode [ 377.865767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 377.917140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 377.941953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 378.014514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 378.128559] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 378.182635] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 378.269123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 378.279066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.320519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 378.327411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.354665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 378.364886] team0: Port device team_slave_0 added [ 378.410747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 378.418217] team0: Port device team_slave_1 added [ 378.468626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 378.475934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.491251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.508022] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 378.515656] team0: Port device team_slave_0 added [ 378.529188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.568661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 378.576271] team0: Port device team_slave_1 added [ 378.584285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 378.591931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.609467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.628562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.656475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 378.664489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.675181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.718457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.748649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 378.756088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.764775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.815532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 378.823537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.833155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.961084] device bridge_slave_1 left promiscuous mode [ 378.966670] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.020817] device bridge_slave_0 left promiscuous mode [ 379.026282] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.082487] team0 (unregistering): Port device team_slave_1 removed [ 379.093599] team0 (unregistering): Port device team_slave_0 removed [ 379.106035] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 379.154574] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 379.223299] bond0 (unregistering): Released all slaves [ 379.548212] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.554664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.561409] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.567784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.583084] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 379.971740] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.978146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.984883] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.991307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.030570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 380.350125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.357493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.046840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.222673] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 382.405702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 382.411994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.428543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.448470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.584089] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.635846] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 382.811270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 382.817492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.834656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.000486] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.666159] autofs4:pid:15426:autofs_fill_super: called with bogus options [ 383.675890] autofs4:pid:15429:autofs_fill_super: called with bogus options 12:41:37 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673ff", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x7, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:41:37 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x700000000000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4003) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) 12:41:37 executing program 2: msgctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 12:41:37 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 383.984007] autofs4:pid:15463:autofs_fill_super: called with bogus options [ 383.993223] 9pnet: Insufficient options for proto=fd [ 384.004285] 9pnet: Insufficient options for proto=fd [ 384.013948] autofs4:pid:15471:autofs_fill_super: called with bogus options [ 384.028229] 9pnet: Insufficient options for proto=fd 12:41:38 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ab553fec94248d32e27d04000001288a", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x401, 0x20, 0x3}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @remote}}}, 0x84) r4 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e22, @rand_addr=0x5}}) readv(r4, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1) [ 384.062184] 9pnet: Insufficient options for proto=fd 12:41:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x300, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x14, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 384.148298] autofs4:pid:15489:autofs_fill_super: called with bogus options 12:41:38 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:38 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="91830070b68a0cefc72f920fe8cbb14c8f5a6b8b942b164689d556e5756e6cc599e06b6a4cfaca8e2fda13182bb1835ac85d28c14b0e60b084293256591ac38982e211789d8e8d4d83681ceb3c845a1fe64fd6a4c45bc62a782f34b58a76de55d180788e2e1b414f3e9cd428e8f5d0521b301c3eb763a7bf5b28668b67fcc44a5c058b5a3b1ab0f0d25e387a1c588370f8e788d341349429df2801ce27d03b7c552148e484ed5b05c8e4b9e1c9356a89b963867b655ddbf14837b6c655df34bae07631bf1d216cb718feb29dea"], 0xcd) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 12:41:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000000000000) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x0, [{0xc0000100}]}) [ 384.293184] overlayfs: missing 'lowerdir' [ 384.296674] autofs4:pid:15504:autofs_fill_super: called with bogus options 12:41:38 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 384.372497] autofs4:pid:15511:autofs_fill_super: called with bogus options 12:41:38 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673fe", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf6ffffff00000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 384.540518] autofs4:pid:15529:autofs_fill_super: called with bogus options [ 384.561134] autofs4:pid:15533:autofs_fill_super: called with bogus options 12:41:38 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x98081) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000140)={0x8, 0x5, 0x7f, 0x0, 'syz1\x00', 0x1ff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4024) setsockopt$inet_int(r2, 0x0, 0x10, &(0x7f0000000100)=0x42, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000000), 0x356) 12:41:38 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f6673eb", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x400000000000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:38 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766246e6f3d2a2563e4d36fd46b528ca87edf25b1ac32bb4132733272ac6faa5010d311603d3b779eb260bdb78166b9d7f61daaa522f393ab200b", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006fff0f010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x80000001}, &(0x7f0000000300)=0x8) fcntl$getown(r3, 0x9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r4, 0x7}, &(0x7f0000000700)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000840), &(0x7f0000000880)=0xb) 12:41:38 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:38 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000002f67ca3f97", 0x31, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) socketpair(0x12, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x307, @link_local}, 0x40, {0x2, 0x4e24, @multicast2}, 'bcsf0\x00'}) [ 384.829624] 9pnet: Insufficient options for proto=fd 12:41:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 384.879386] autofs4:pid:15575:autofs_fill_super: called with bogus options 12:41:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa00, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:38 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 384.933020] f2fs_msg: 6 callbacks suppressed [ 384.933032] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.935219] 9pnet: Insufficient options for proto=fd [ 384.951007] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 384.969570] autofs4:pid:15585:autofs_fill_super: called with bogus options [ 385.020450] autofs4:pid:15594:autofs_fill_super: called with bogus options [ 385.024868] F2FS-fs (loop2): Invalid segment/section count (151, 1070229295 x 1) 12:41:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000328eafb300000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0x309, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000700)={0xa0, 0x19, 0x2, {0x2000, {0x88, 0x1, 0x4}, 0x80, r2, r3, 0x1, 0x4, 0x5, 0x100000000, 0x1ff, 0x2, 0x6797, 0x7fff, 0x7, 0x1, 0xb18, 0x5, 0x401, 0x0, 0xff}}, 0xa0) [ 385.073355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 385.090287] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 385.099479] autofs4:pid:15603:autofs_fill_super: called with bogus options 12:41:39 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)="6175746f667303", 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:39 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 385.127990] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 385.141307] overlayfs: missing 'lowerdir' [ 385.142064] F2FS-fs (loop2): Invalid segment/section count (151, 1070229295 x 1) 12:41:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x3, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 385.212918] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 385.229045] overlayfs: missing 'lowerdir' [ 385.243590] autofs4:pid:15624:autofs_fill_super: called with bogus options 12:41:39 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofst', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:39 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) [ 385.319744] autofs4:pid:15637:autofs_fill_super: called with bogus options [ 385.338108] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 385.382032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 12:41:39 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xfffb}}}, 0x24}}, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') 12:41:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/97, 0x61}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xcad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xa, &(0x7f0000003000)={0x3, 0x2000000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x801212}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x14, 0x0, 0x410, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 385.489474] overlayfs: missing 'lowerdir' 12:41:39 executing program 2: socketpair$unix(0x1, 0x2000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=@srh, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000004c0)=""/241, &(0x7f0000000040)=0xf1) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/45, 0x2d}], 0x6, 0x0, 0x0, 0x5648}, 0x10000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000001600)=0xc, 0x4) 12:41:39 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 385.564067] autofs4:pid:15663:autofs_fill_super: called with bogus options 12:41:39 executing program 3: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8cffffff00000000, &(0x7f0000000340)={[{@xino_auto='xino=auto'}]}) 12:41:39 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='autofs\x00', 0x0, &(0x7f0000000300)='cpuset(&wlan1-user+wlan0lo#\\eth1\\(selinuxvboxnet1\x00') [ 385.634762] autofs4:pid:15672:autofs_fill_super: called with bogus options [ 385.647724] autofs4:pid:15669:autofs_fill_super: called with bogus options [ 385.667046] autofs4:pid:15677:autofs_fill_super: called with bogus options [ 385.801821] autofs4:pid:15689:autofs_fill_super: called with bogus options [ 535.790089] INFO: task syz-executor5:15639 blocked for more than 140 seconds. [ 535.797529] Not tainted 4.19.0-rc8+ #61 [ 535.803023] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.811072] syz-executor5 D23864 15639 5513 0x00000004 [ 535.816735] Call Trace: [ 535.819316] __schedule+0x86c/0x1ed0 [ 535.823092] ? debug_smp_processor_id+0x1c/0x20 [ 535.827782] ? perf_trace_lock_acquire+0x15b/0x800 [ 535.832771] ? __sched_text_start+0x8/0x8 [ 535.836937] ? graph_lock+0x170/0x170 [ 535.840795] ? print_usage_bug+0xc0/0xc0 [ 535.844869] ? perf_trace_lock_acquire+0x15b/0x800 [ 535.849866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.855421] ? find_held_lock+0x36/0x1c0 [ 535.859474] schedule+0xfe/0x460 [ 535.862898] ? __schedule+0x1ed0/0x1ed0 [ 535.866937] ? lockdep_hardirqs_on+0x421/0x5c0 [ 535.871604] ? trace_hardirqs_on+0xbd/0x310 [ 535.875938] ? kasan_check_read+0x11/0x20 [ 535.880143] ? __rwsem_down_write_failed_common+0x8db/0x1670 [ 535.885960] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 535.891726] ? kasan_check_write+0x14/0x20 [ 535.895973] ? do_raw_spin_lock+0xc1/0x200 [ 535.900272] __rwsem_down_write_failed_common+0xbb9/0x1670 [ 535.905920] ? find_held_lock+0x36/0x1c0 [ 535.910048] ? rwsem_spin_on_owner+0xa30/0xa30 [ 535.914652] ? __lock_acquire+0x7ec/0x4ec0 [ 535.918929] ? check_preemption_disabled+0x48/0x200 [ 535.926463] ? mark_held_locks+0x130/0x130 [ 535.931593] ? mark_held_locks+0x130/0x130 [ 535.935881] ? kernel_text_address+0x79/0xf0 [ 535.940372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.945918] ? check_preemption_disabled+0x48/0x200 [ 535.951057] ? debug_smp_processor_id+0x1c/0x20 [ 535.955753] ? perf_trace_lock_acquire+0x15b/0x800 [ 535.960836] ? debug_smp_processor_id+0x1c/0x20 [ 535.965522] ? perf_trace_lock_acquire+0x15b/0x800 [ 535.970516] ? perf_trace_lock+0x7a0/0x7a0 [ 535.974766] ? perf_trace_lock+0x7a0/0x7a0 [ 535.978994] ? __kasan_slab_free+0x102/0x150 [ 535.983469] ? kasan_slab_free+0xe/0x10 [ 535.987451] ? kmem_cache_free+0x83/0x290 [ 535.991652] ? putname+0xf2/0x130 [ 535.995116] ? filename_lookup+0x39a/0x520 [ 535.999332] ? user_path_at_empty+0x40/0x50 [ 536.003712] ? graph_lock+0x170/0x170 [ 536.007598] ? do_syscall_64+0x1b9/0x820 [ 536.011736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.017112] ? trace_hardirqs_off+0xb8/0x310 [ 536.021702] ? do_raw_spin_unlock+0xa7/0x2f0 [ 536.026118] ? trace_hardirqs_on+0x310/0x310 [ 536.030592] ? __lock_is_held+0xb5/0x140 [ 536.034735] ? lock_acquire+0x1ed/0x520 [ 536.038879] ? utimes_common.isra.1+0x45c/0x8e0 [ 536.043630] ? lock_release+0x970/0x970 [ 536.047619] ? arch_local_save_flags+0x40/0x40 [ 536.052289] rwsem_down_write_failed+0xe/0x10 [ 536.056799] ? rwsem_down_write_failed+0xe/0x10 [ 536.062311] call_rwsem_down_write_failed+0x17/0x30 [ 536.067375] down_write+0xa5/0x130 [ 536.070986] ? utimes_common.isra.1+0x45c/0x8e0 [ 536.075669] ? down_read+0x1d0/0x1d0 [ 536.079367] ? __sb_start_write+0x1b2/0x370 [ 536.083752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.089315] utimes_common.isra.1+0x45c/0x8e0 [ 536.093873] ? __ia32_sys_sync_file_range2+0xf0/0xf0 [ 536.098969] ? kmem_cache_alloc+0x33a/0x730 [ 536.103479] ? __might_fault+0x12b/0x1e0 [ 536.107574] ? arch_local_save_flags+0x40/0x40 [ 536.112331] do_utimes+0x1f7/0x380 [ 536.115884] ? utimes_common.isra.1+0x8e0/0x8e0 [ 536.120681] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 536.126237] ? _copy_from_user+0xdf/0x150 [ 536.130455] do_futimesat+0x250/0x350 [ 536.134305] ? put_timespec64+0x10f/0x1b0 [ 536.138444] ? __ia32_sys_utime+0x290/0x290 [ 536.142826] ? lockdep_hardirqs_on+0x421/0x5c0 [ 536.147425] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.152844] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 536.158313] __x64_sys_utimes+0x59/0x80 [ 536.162354] do_syscall_64+0x1b9/0x820 [ 536.166254] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 536.171677] ? syscall_return_slowpath+0x5e0/0x5e0 [ 536.176619] ? trace_hardirqs_on_caller+0x310/0x310 [ 536.181701] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 536.186739] ? recalc_sigpending_tsk+0x180/0x180 [ 536.192400] ? kasan_check_write+0x14/0x20 [ 536.196643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.201551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.206756] RIP: 0033:0x457569 [ 536.210023] Code: 83 c4 18 c3 e8 d8 64 00 00 48 8b 04 24 48 8b 4c 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 <01> 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 00 00 b8 01 00 00 [ 536.229083] RSP: 002b:00007fe2f88cec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 536.236854] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 536.244430] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 00000000200000c0 [ 536.251751] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 536.259024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2f88cf6d4 [ 536.266354] R13: 00000000004c4f46 R14: 00000000004d8508 R15: 00000000ffffffff [ 536.273695] [ 536.273695] Showing all locks held in the system: [ 536.280154] 1 lock held by khungtaskd/983: [ 536.284396] #0: 00000000f5dbedfd (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 536.293187] 1 lock held by rsyslogd/5229: [ 536.297409] #0: 00000000a6c44428 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 536.305467] 2 locks held by getty/5319: [ 536.309427] #0: 00000000690f4064 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.317726] #1: 00000000237f2d30 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.327292] 2 locks held by getty/5320: [ 536.331330] #0: 000000000f0ba16c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.339607] #1: 00000000a12f9665 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.348541] 2 locks held by getty/5321: [ 536.352622] #0: 00000000f6691c17 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.360936] #1: 00000000fc2bbd62 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.369881] 2 locks held by getty/5322: [ 536.373891] #0: 00000000303e94af (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.382211] #1: 000000004e7ae8df (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.391186] 2 locks held by getty/5323: [ 536.395161] #0: 00000000e66fdae3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.403475] #1: 000000008d57e5a1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.412397] 2 locks held by getty/5324: [ 536.416454] #0: 0000000061c225c2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.424761] #1: 00000000ed3633c0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.433824] 2 locks held by getty/5325: [ 536.437793] #0: 0000000096ad6dec (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 536.446103] #1: 00000000246ef521 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 536.455729] 2 locks held by syz-executor5/15616: [ 536.460536] #0: 00000000f419e5f6 (sb_writers#17){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 536.468579] #1: 00000000809a673a (&sb->s_type->i_mutex_key#26){++++}, at: utimes_common.isra.1+0x45c/0x8e0 [ 536.478560] 2 locks held by syz-executor5/15639: [ 536.483364] #0: 00000000f419e5f6 (sb_writers#17){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 536.491483] #1: 00000000809a673a (&sb->s_type->i_mutex_key#26){++++}, at: utimes_common.isra.1+0x45c/0x8e0 [ 536.501486] [ 536.503102] ============================================= [ 536.503102] [ 536.510157] NMI backtrace for cpu 1 [ 536.513788] CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #61 [ 536.520613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.529961] Call Trace: [ 536.532549] dump_stack+0x1c4/0x2b4 [ 536.536222] ? dump_stack_print_info.cold.2+0x52/0x52 [ 536.541414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.546954] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 536.551668] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 536.556849] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 536.562133] arch_trigger_cpumask_backtrace+0x14/0x20 [ 536.567315] watchdog+0xb3e/0x1050 [ 536.570848] ? reset_hung_task_detector+0xd0/0xd0 [ 536.575679] ? __kthread_parkme+0xce/0x1a0 [ 536.579906] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 536.585049] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 536.590156] ? lockdep_hardirqs_on+0x421/0x5c0 [ 536.594741] ? trace_hardirqs_on+0xbd/0x310 [ 536.599054] ? kasan_check_read+0x11/0x20 [ 536.603188] ? __kthread_parkme+0xce/0x1a0 [ 536.607408] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 536.612954] ? kasan_check_write+0x14/0x20 [ 536.617178] ? do_raw_spin_lock+0xc1/0x200 [ 536.621405] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 536.626501] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 536.632029] ? __kthread_parkme+0xfb/0x1a0 [ 536.636253] kthread+0x35a/0x420 [ 536.639615] ? reset_hung_task_detector+0xd0/0xd0 [ 536.644452] ? kthread_bind+0x40/0x40 [ 536.648248] ret_from_fork+0x3a/0x50 [ 536.652183] Sending NMI from CPU 1 to CPUs 0: [ 536.656762] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 536.658742] Kernel panic - not syncing: hung_task: blocked tasks [ 536.670453] CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #61 [ 536.677289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.686635] Call Trace: [ 536.689216] dump_stack+0x1c4/0x2b4 [ 536.692836] ? dump_stack_print_info.cold.2+0x52/0x52 [ 536.698126] panic+0x238/0x4e7 [ 536.701320] ? add_taint.cold.5+0x16/0x16 [ 536.705461] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 536.710897] ? nmi_trigger_cpumask_backtrace+0x1c4/0x1ed [ 536.716344] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 536.721785] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 536.727228] watchdog+0xb4f/0x1050 [ 536.730820] ? reset_hung_task_detector+0xd0/0xd0 [ 536.735709] ? __kthread_parkme+0xce/0x1a0 [ 536.739940] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 536.745043] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 536.750185] ? lockdep_hardirqs_on+0x421/0x5c0 [ 536.754771] ? trace_hardirqs_on+0xbd/0x310 [ 536.759077] ? kasan_check_read+0x11/0x20 [ 536.763214] ? __kthread_parkme+0xce/0x1a0 [ 536.767438] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 536.772873] ? kasan_check_write+0x14/0x20 [ 536.777095] ? do_raw_spin_lock+0xc1/0x200 [ 536.781320] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 536.786408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 536.791932] ? __kthread_parkme+0xfb/0x1a0 [ 536.796151] kthread+0x35a/0x420 [ 536.799505] ? reset_hung_task_detector+0xd0/0xd0 [ 536.804341] ? kthread_bind+0x40/0x40 [ 536.808134] ret_from_fork+0x3a/0x50 [ 536.812859] Kernel Offset: disabled [ 536.816486] Rebooting in 86400 seconds..